<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Google&#8217;s claim on Chrome security is nonsense</title>
	<atom:link href="http://www.theemailadmin.com/2009/07/googles-claim-on-chrome-security-is-nonsense/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.theemailadmin.com/2009/07/googles-claim-on-chrome-security-is-nonsense/</link>
	<description></description>
	<lastBuildDate>Thu, 09 Feb 2012 11:07:36 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
	<item>
		<title>By: Dan Blacharski</title>
		<link>http://www.theemailadmin.com/2009/07/googles-claim-on-chrome-security-is-nonsense/comment-page-1/#comment-5824</link>
		<dc:creator>Dan Blacharski</dc:creator>
		<pubDate>Fri, 24 Jul 2009 01:09:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.theemailadmin.com/?p=1260#comment-5824</guid>
		<description>True enough, I was indeed blowing smoke, as was Google in their claim that Chrome would not need security. No need to evaluate the software to know an unrealistic marketing claim when I hear one. I&#039;m not saying Chrome is a bad OS, it may well be the best thing since sliced bread, it&#039;s just plain irresponsible for Google to lull users into a false sense of security with such a claim.</description>
		<content:encoded><![CDATA[<p>True enough, I was indeed blowing smoke, as was Google in their claim that Chrome would not need security. No need to evaluate the software to know an unrealistic marketing claim when I hear one. I&#8217;m not saying Chrome is a bad OS, it may well be the best thing since sliced bread, it&#8217;s just plain irresponsible for Google to lull users into a false sense of security with such a claim.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: VivaRonPaul</title>
		<link>http://www.theemailadmin.com/2009/07/googles-claim-on-chrome-security-is-nonsense/comment-page-1/#comment-5683</link>
		<dc:creator>VivaRonPaul</dc:creator>
		<pubDate>Sun, 19 Jul 2009 09:12:54 +0000</pubDate>
		<guid isPermaLink="false">http://www.theemailadmin.com/?p=1260#comment-5683</guid>
		<description>Zenix,

Take a chill pill man.  It was only obvious Blackarski was only blowing smoke, like you said, he hasn&#039;t even tried the os out yet.  

But he has a few of the fundamentals right.  It is truly impossible to make an os or any program completely invulnerable to attack.  Why?  Because they are all written in code (obviously, some programming will be better than others but nevertheless they all have innate weaknesses).  Ever met a human being that never had a cold, infection, or any medical trauma in their life?  It&#039;s in our nature to be weak but just the same, some are stronger than others.

In the end, it is impossible to build a program (as we know programming today) to be completely bullet proof.</description>
		<content:encoded><![CDATA[<p>Zenix,</p>
<p>Take a chill pill man.  It was only obvious Blackarski was only blowing smoke, like you said, he hasn&#8217;t even tried the os out yet.  </p>
<p>But he has a few of the fundamentals right.  It is truly impossible to make an os or any program completely invulnerable to attack.  Why?  Because they are all written in code (obviously, some programming will be better than others but nevertheless they all have innate weaknesses).  Ever met a human being that never had a cold, infection, or any medical trauma in their life?  It&#8217;s in our nature to be weak but just the same, some are stronger than others.</p>
<p>In the end, it is impossible to build a program (as we know programming today) to be completely bullet proof.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Hunter Freyer</title>
		<link>http://www.theemailadmin.com/2009/07/googles-claim-on-chrome-security-is-nonsense/comment-page-1/#comment-5647</link>
		<dc:creator>Hunter Freyer</dc:creator>
		<pubDate>Sat, 18 Jul 2009 01:39:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.theemailadmin.com/?p=1260#comment-5647</guid>
		<description>I think you fail to grasp how different Chrome OS is from a typical OS. The reason that these claims (though perhaps simplifications) have weight is that the attack surface for Chrome is smaller than any other operating system by far.

For instance, the OS and all system files (nay, all files besides cache, update packages, and things like bookmarks) are mounted read-only.  &quot;System calls&quot; are exposed though JS APIs. The attack surfaces pretty much amount to: bugs in the JS engine, design flaws in the security model, and the auto-update process. Granted, there may well be vulnerabilities here, but compare that to Windows in which *every single DLL* is a potential target for attack.  Refusing to execute any untrusted code has dramatic implications for security.

That said, Google&#039;s claim, as I interpret it, is about &quot;malware&quot; and &quot;viruses&quot; as we see them today.  Of course, the existence of an entirely cloud-based OS underscores the increase in risks associated with cross-site scripting bugs, phishing and other purely web-based threats as we move our computing off the client. But these issues are present on any operating system with a browser, so there&#039;s not much to talk about with respect to Chrome specifically.

I think even if Google&#039;s claim is a bit overzealous, it&#039;s absolutely grounded in reality more so than previous claims by MS and Apple.</description>
		<content:encoded><![CDATA[<p>I think you fail to grasp how different Chrome OS is from a typical OS. The reason that these claims (though perhaps simplifications) have weight is that the attack surface for Chrome is smaller than any other operating system by far.</p>
<p>For instance, the OS and all system files (nay, all files besides cache, update packages, and things like bookmarks) are mounted read-only.  &#8220;System calls&#8221; are exposed though JS APIs. The attack surfaces pretty much amount to: bugs in the JS engine, design flaws in the security model, and the auto-update process. Granted, there may well be vulnerabilities here, but compare that to Windows in which *every single DLL* is a potential target for attack.  Refusing to execute any untrusted code has dramatic implications for security.</p>
<p>That said, Google&#8217;s claim, as I interpret it, is about &#8220;malware&#8221; and &#8220;viruses&#8221; as we see them today.  Of course, the existence of an entirely cloud-based OS underscores the increase in risks associated with cross-site scripting bugs, phishing and other purely web-based threats as we move our computing off the client. But these issues are present on any operating system with a browser, so there&#8217;s not much to talk about with respect to Chrome specifically.</p>
<p>I think even if Google&#8217;s claim is a bit overzealous, it&#8217;s absolutely grounded in reality more so than previous claims by MS and Apple.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: N. Zenix</title>
		<link>http://www.theemailadmin.com/2009/07/googles-claim-on-chrome-security-is-nonsense/comment-page-1/#comment-5574</link>
		<dc:creator>N. Zenix</dc:creator>
		<pubDate>Thu, 16 Jul 2009 03:49:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.theemailadmin.com/?p=1260#comment-5574</guid>
		<description>Dan,

You are claiming ChromeOS security is nonsense but where exactly is your actual security evaluation of ChromeOS? The word of someone who hasn&#039;t used it or even had the OS to perform even basic security checks isn&#039;t exactly worth much.

Essentially you&#039;ve based your evaluation on the Mac&#039;s rare vulnerabilities, comparing those to Windows routine vulnerabilities.

While the Mac has rare security issues, anyone existing in reality has to wonder why almost all Windows vulnerabilities end in this phrase &quot;...and gain complete control of your computer.&quot;

It is the worst OS in the world on security with issues often going unpatched for years. Every version trots out the same tired marketing  &quot;more secure &amp; reliable&quot; ad&#039;s...Hows that worked for us so far? 
(Vista&#039;s ultra-secure...right?)

Explaining this away with it being the OS that&#039;s the largest target, doesn&#039;t deny the fact it IS the largest unsecured target. You have more virulent attacks on the OS, Spyware, Personal data theft, difficult or impossible to remove rootkits and a company that seems incapable of understanding that security should be built into the foundation of an OS...not patched onto it.

Based on your own statements here, your comparison is not only invalid but invalidated by your own comments about the OS in hardware devices such as hardened firewalls.

Absoluely secure? 
Are you HONESTLY counting local physical access to the machine, firmware and internal files...because not even business or military systems can withstand an inside job. Waving the it&#039;s not &quot;Absolutely secure&quot; banner simply invalidates your own comments. Further claiming creating a foolproof easy to use OS is impossible, sounds very much like what your really saying is it&#039;s impossible for you.

By your comments it IS possible to make an OS and hardware secure, if designed &amp; built from the ground up for it&#039;s function. (What computer isn&#039;t &quot;hardware&quot;?)

You have in fact, accomplished something...Confirmed a secure ChromeOS is not only possible, but examples of similar secure devices exist everywhere hardware is sold.

Thank you.</description>
		<content:encoded><![CDATA[<p>Dan,</p>
<p>You are claiming ChromeOS security is nonsense but where exactly is your actual security evaluation of ChromeOS? The word of someone who hasn&#8217;t used it or even had the OS to perform even basic security checks isn&#8217;t exactly worth much.</p>
<p>Essentially you&#8217;ve based your evaluation on the Mac&#8217;s rare vulnerabilities, comparing those to Windows routine vulnerabilities.</p>
<p>While the Mac has rare security issues, anyone existing in reality has to wonder why almost all Windows vulnerabilities end in this phrase &#8220;&#8230;and gain complete control of your computer.&#8221;</p>
<p>It is the worst OS in the world on security with issues often going unpatched for years. Every version trots out the same tired marketing  &#8220;more secure &amp; reliable&#8221; ad&#8217;s&#8230;Hows that worked for us so far?<br />
(Vista&#8217;s ultra-secure&#8230;right?)</p>
<p>Explaining this away with it being the OS that&#8217;s the largest target, doesn&#8217;t deny the fact it IS the largest unsecured target. You have more virulent attacks on the OS, Spyware, Personal data theft, difficult or impossible to remove rootkits and a company that seems incapable of understanding that security should be built into the foundation of an OS&#8230;not patched onto it.</p>
<p>Based on your own statements here, your comparison is not only invalid but invalidated by your own comments about the OS in hardware devices such as hardened firewalls.</p>
<p>Absoluely secure?<br />
Are you HONESTLY counting local physical access to the machine, firmware and internal files&#8230;because not even business or military systems can withstand an inside job. Waving the it&#8217;s not &#8220;Absolutely secure&#8221; banner simply invalidates your own comments. Further claiming creating a foolproof easy to use OS is impossible, sounds very much like what your really saying is it&#8217;s impossible for you.</p>
<p>By your comments it IS possible to make an OS and hardware secure, if designed &amp; built from the ground up for it&#8217;s function. (What computer isn&#8217;t &#8220;hardware&#8221;?)</p>
<p>You have in fact, accomplished something&#8230;Confirmed a secure ChromeOS is not only possible, but examples of similar secure devices exist everywhere hardware is sold.</p>
<p>Thank you.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: steveballmer</title>
		<link>http://www.theemailadmin.com/2009/07/googles-claim-on-chrome-security-is-nonsense/comment-page-1/#comment-5550</link>
		<dc:creator>steveballmer</dc:creator>
		<pubDate>Wed, 15 Jul 2009 16:52:54 +0000</pubDate>
		<guid isPermaLink="false">http://www.theemailadmin.com/?p=1260#comment-5550</guid>
		<description>I had my people obtain (by means I cannot admit to) from the Google Labs a model of the new Google OS and even better than that, the platform they plan on running it on! It&#039;s a radical new design slate computer! Sure enough it browses the internet, runs Google-Apps, has a task bar, prints and has a true chrome interface!
I will withhold judgement right now but I am not shaking in my boots over competition from this thing! I could be wrong, what do you guys think?</description>
		<content:encoded><![CDATA[<p>I had my people obtain (by means I cannot admit to) from the Google Labs a model of the new Google OS and even better than that, the platform they plan on running it on! It&#8217;s a radical new design slate computer! Sure enough it browses the internet, runs Google-Apps, has a task bar, prints and has a true chrome interface!<br />
I will withhold judgement right now but I am not shaking in my boots over competition from this thing! I could be wrong, what do you guys think?</p>
]]></content:encoded>
	</item>
</channel>
</rss>

