Linked by Thom Holwerda on Tue 24th Nov 2009 17:28 UTC, submitted by waid0004
Google Google has put up a very interesting document explaining the security features underlying its Chrome OS. The document also details the underlying guiding principles of Chrome OS' security features.
Thread beginning with comment 396224
To read all comments associated with this story, please click here.
Who freakin cares about the OS
by joshv on Tue 24th Nov 2009 21:45 UTC
joshv
Member since:
2006-03-18

So they sit down and make an OS that does nothing but show you a full screen browser, and stores absolutely no user data locally, and then brag about how secure the OS is. There's nothing to crack or hack on the damned PC, so who cares how secure it is.

What matters is how secure the web services you are using are.

All somebody has to do to hack into your google account and compromise all your data is throw up a web page that looks like the Chrome OS login and hope you aren't all that savvy, or aren't paying attention. And guess what - it will work, no matter how damned secure the OS that launched the browser is.

Reply Score: 5

ciplogic Member since:
2006-12-22

This said Microsoft about Windows 98.
We really care, just for sake of how will be oriented the attacks. Moving the attacks from OS to a higher level like a web-page which supposedly will be easier to be tested. Also Google have the knowhow to use a blacklist-whitelist just to block most of those attempts. Or at least I just hope they will!

Reply Parent Score: 1

darknexus Member since:
2008-07-15

Sure, they can use a blacklist, but that is an inherantly reactionary approach. They can't blacklist what they don't know, and the odds are they won't know until a user has been tricked.

Reply Parent Score: 2

Abacus_ Member since:
2006-12-08

All somebody has to do to hack into your google account and compromise all your data is throw up a web page that looks like the Chrome OS login and hope you aren't all that savvy, or aren't paying attention.


Using HTTPS instead of plain HTTP should help to avoid man-in-the-middle attacks. As far as I know all Google services support HTTPS.

Reply Parent Score: 1