Security

Google Chrome OS sparks security concerns

Be the first to comment | 12I like it!
July 9, 2009, 06:23 AM — 

Google’s Chrome OS, announced on Tuesday, is already raising security concerns, based on boasts that the company is making about the new operating system’s underlying security architecture that sound far-fetched.

Wednesday’s post on the Official Google Blog made the following claim: “And as we did for the Google Chrome browser, we are going back to the basics and completely redesigning the underlying security architecture of the OS so that users don't have to deal with viruses, malware and security updates. It should just work.”

Yes it should. But will it?

One security executive told the IDG News Service that those claims are idiotic, adding that creating an operating system that is immune to viruses is as impossible as making 2+2 =3. Although other security experts quoted in the article said it’s entirely possible to develop a more secure operating system than today’s status quo.

It’s hard to judge how secure Google Chrome OS will be without more information about this underlying security architecture. No doubt the computing world would welcome a more secure operating system that required less patching and fixing than Windows, but such an operating system would also be based on brand-new technology that is untested, and therefore unsecure.

However there are some aspects of Google’s existing technology that could put the new operating system in a good starting position. For example, Google’s security claims could be somewhat bolstered if Google Chrome OS uses the same sandboxing technology that the Google Chrome browser uses. Sandboxing creates a confined execution environment where untrusted programs can be run without giving the application full access to the underlying system, therefore limiting the amount of damage that can be done.

And, because Google Chrome OS will be based on Linux, which historically has fewer security threats targeted at it than Windows, it could prove to be a more secure environment than what’s running on most PCs these days.

Based on all the head-scratching that’s going on about Google Chrome OS security claims, hopefully Google will enlighten us soon with more information.

Meanwhile, Google Chrome OS is also raising privacy concerns as the new operating system gives Google yet another way to collect, and profit from, its users’ personal information.
Do you tweet? Follow me on Twitter here.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
peer-to-peer

Brian Proffitt
Microsoft/Novell: Breaking Down the Coupon Numbers

Esther Schindler
Drupal's Dries Buytaert on Building the Next Drupal

Tom Henderson
Top Ten General Operating Systems Rants

pasmith
PS3 motion controller delayed; goes up against Project Natal

sjvn
Neolithic Windows security hole alive and well in Windows 7

claird
Perl source code comparison makes for good reading

mikelgan
Cell phones don't create stress or interrupt much

Sandra Henry-Stocker
How to: The Unix Interview

 

Where Google Chrome security fails: the password
I heard mention that the Chrome OS will have some sort of encryption available a la bitlocker. If it's possible to encrypt personal data using another password or key, then it may have potential for very secure data.... And Ubuntu has an 'encrypt home directory' option, perhaps google should follow suit.
- Dann

Join the conversation here

The Daily Tip

The Daily TipQuick, practical advice for IT pros. Made fresh daily.

Hot tips:

Want to cash in on your IT savvy? Send your tip to tips@itworld.com. If we post it, we'll send you a $25 Amazon e-gift card.

Newsletters

Subscribe to ITWORLD TODAY and receive the latest IT news and analysis.

I would like to receive offers via email from ITworld partners.
By clicking submit you agree to the terms and conditions outlined in ITworld's privacy policy.
Marketplace