Tuesday, May 10, 2011

Google Chrome Security: Less than Perfect

One of the major features touted when the Google Chrome web browser was introduce was its vastly improved security features. Their actions triggered other browsers to implement similar features, thereby improving the web for a much larger user base. However, their security is still not perfect.

My beef with Chrome is that it frequently prompts me that the file I am downloading might be dangerous for my computer. First off, I use Linux so even if I did download a "harmful file", it still cannot do anything that harmful unless I give it sudo rights...which I won't. But even if I was using Windows, I still think that this message appears too often.

The false positive rate for this feature is something like 50% but should be no larger than 5%. This message is supposed to be a security feature, but an alarm that is always going off is ignored.

I created a bug report for Chromium, the open source browser on which Google Chrome is based, about this issue. Hopefully people will see it, take it seriously, and provide a fix.