Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 9 down vote favorite
2

I was amazed that IE 8, Safari, Firefox were hacked so fast. Is it really Chrome so good or it was not tested?

Has anyone other results of independent investigations about security of web browsers? Is these a list of "problems" or weaknesses by browser types?

Thank you.

share|improve this question
Doesn't exactly answer the question, but some good info on Google Chrome security here portal.acm.org/citation.cfm?id=1536634 – Graphics Noob Nov 12 '10 at 5:59

5 Answers

up vote 10 down vote accepted

Many bugs/vulnerabilities have been found in Chrome, but, as user Arda Xi has said - Chrome's security heavily relies on sandboxing. So, that's why there are no live known exploits - it is nearly impossible to exploit those vulnerabilities. You can read more about Google Chrome's sandboxing here:

http://blog.azimuthsecurity.com/2010/05/chrome-sandbox-part-1-of-3-overview.html.

share|improve this answer
5  
This is not quite right. Sandboxing does not prevent exploiting vulnerabilities; it reduces the damage that exploits can do (which is good), but does not eliminate them. To be clear, sandboxing is a good thing, but it's not a magic bullet. – D.W. Jan 12 '11 at 2:30
1  
There is a difference between the meaning of "prevents" and "nearly impossible". – anonymous Jan 12 '11 at 10:40
But, code can escape out of sandboxes too, right ? – FirstName LastName Jan 13 at 4:36
up vote 4 down vote

Google Chrome has been "hacked", here is a POC of an exploit that manage to pass the sandbox- VUPEN_Pwning_Chrome

btw - the exploit is private, and as far as we know the lastest version of chrome is still vulnerable to this code execution method.

share|improve this answer
1  
+1 thanks...... – garik Oct 7 '11 at 13:02
up vote 3 down vote

Note that the chrome browser which is developed by Google "phones home". When your understanding of security includes not wanting to share surfing behavior and co., stay away. Chrome is unsecure when it comes to your online privacy.

Google provides some ways to opt-out of most of their "implementations", "online apps" and "features"... but not all! In the end, you will have to remind yourself who provides the browsing client FOR FREE and why there's no price-tag to it.

My quote of the day: Security starts with watching your privates!

share|improve this answer
up vote 1 down vote

The reason that Chrome was not even tested was because of the sandboxing that Google applied to the browser. So even if someone managed to get access to the browser itself, it could only access that process and nothing else, making an attack quite pointless.

share|improve this answer
1  
Note that none of this is relevant to the pwn2own contest. The only thing you need to show to win pwn2own is code execution. Breaking out of the sandbox (if one exists) is not required to win. – Larry Osterman Nov 21 '10 at 8:06
@Larry Code execution does require you to break out of a sandbox, doesn't it? That's exactly what it's there for. – Arda Xi Nov 21 '10 at 9:37
your answer is not correct. The sandbox does not make attacks "quite pointless". A successful exploit of a vulnerability in Chrome could still cause quite a bit of damage; see, e.g., here. What sandboxing does is reduce the likelihood of a catastrophic security breach. It does not eliminate the chance of a catastrophic security breach, and it does not prevent exploitation of vulnerabilities. – D.W. Jan 12 '11 at 2:31
@DW That's not true. First of all, I did not claim that this was why Chrome was secure, just that it was why it was not tested. Also, that blog seems to assume that multiple domains can be assigned to the same rendering process. This is not true. – Arda Xi Jan 12 '11 at 5:42
up vote -1 down vote

I am not sure about safari In OSx, but IE8 is tied to the Windows Operating System so hackers can get access to the OS if they successfully hack the browser and it's plugins. chrome is different because it is not tied to the OS and uses sandbox.

share|improve this answer
Actually, IE8 usually runs in Protected Mode, so there is very little it can actually do in the OS, no matter what was hacked - even the browser itself is restricted. Chrome has an inherent difference, because it is sandboxed BY the OS (using ClickOnce mechanism). – AviD♦ Nov 18 '10 at 21:29
Actually Chrome has a very similar sandbox to that of IE, and they add a few features beyond IE's. – Larry Osterman Nov 21 '10 at 8:07
@Larry, the results of the sandbox are similar, but the mechanism is very different. As far as the OS goes, IE uses Integrity Levels (if on Vista/7), whereas Chrome uses ClickOnce installation. Come to think of it, I'm pretty sure that ClickOnce also uses Integrity Levels, albeit indirectly - but it also has additional sandboxing features. – AviD♦ Nov 21 '10 at 10:57
1  
Heh, but I'm not gonna lecture to Larry Osterman on the internals of Windows security :D. Cool to see you here... Oo, can you also get some of the SWI guys to stop by? Some more "rock stars" could really help push the site... – AviD♦ Nov 21 '10 at 11:04
The google chrome paper: blog.chromium.org/2008/10/… talks about their sandbox. As far as I know, chrome is native code and thus the clickonce sandbox doesn't apply. – Larry Osterman Nov 21 '10 at 17:52

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.