p2pnet news view Security | Products:- p2pnet has already pointed to two potentially serious security holes in Google’s new browser hope.

Not only but also, it, “Installs googleupdate.exe and doesn’t delete it if you uninstall, also keeps running it when you kill it,” posts hahaha.

And, “I noticed that googleupdate.exe thing too,” says Robert Chapin. “I removed it from HKLM…Run and it hasn’t been back since.”

Now there’s has a new concern.

“Is it just me or does Chrome work outside of ‘Program Files’, a HUGE security flaw?” - wonders Magnus Mårtensson in a p2pnet Reader’s Write?

Mårtensson points to his Techie.notepad on which he writes »»»

I posted last night about some things regarding Chrome: Google Chrome the good and the pettyOne thing immediately got commented by my friend and colleague Håkan Reis. I thought he’d comment more on the UX bits I posted since he’s very focused on that area. But he put another issue at the top of the list. I concur that this actually warrants a post of it’s own!

Google Chrome installs under your local user settings. In my case its the folder C:\Users\Magnus\AppData\Local\Google\Chrome\Application. This means we now have an app running outside of Vistas regular security zones.

You need elevated rights in Vista to modify files that lie under C:\Program Files but not to modify files under C:\Users\<your user>\. This means that any app that might run on your machine can do what ever changes to the Chrome application that it wishes!

This ensues a major security issue for Chrome! Or did I miss something in Security 101?

Cheers,
/Magnus

Stay tuned.

serious security hole - Google Chrome security flaws, September 4, 2008

---

Use free p2pnet newsfeeds for your site. It’s really easy!

Subscribe to p2pnet.net | | rss feed: http://p2pnet.net/p2p.rss | | Mobile - http://p2pnet.net/index-wml.php

---

Net access blocked by government restrictions? Use Psiphon from the Citizen Lab at the University of Toronto. Go here for details.

This entry was posted on Friday, September 5th, 2008 at 8:11 am and is filed under Security, Product News. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

HOME

Viewed 2362 times