Saturday, September 6, 2008

Security flaws

Multiple security experts have criticized what is the automatic file download feature that comes enabled by default in Google Chrome. They argued that it could be used by an attacker to easily trick a user into opening a malicious executable file.

A denial-of-service vulnerability has also been found that allows a malicious web page to crash the whole web browser. Google Chrome developers confirmed the flaw, and it has already been fixed in the SVN repository.

Privacy

Users began raising privacy concerns about data collection in Chrome. The omnibar's auto-suggest features sends data back to Google about the keystrokes inputted. A Google representative said that about 2% of the data would be stored along with the IP address of the computer that sent the data. Google also stated users can opt-out by turning off the auto-suggest feature or switching to Incognito.