Google has released Google Chrome a beta browser built with open source code from Chromium.
Design Decision I liked:
1)Making chrome a multi-process application instead of multi-threaded
2)New JS engine
3)Implementing blacklisting of sites(both malware and Phisihng sites ) by default which is powered by Google .
4)Sandboxing all the tabs making it detach from the underlying OS makes it at least safe
5)Task manager for each tab with the stats of CPU and memory usage makes it cool.
6)Loading is pretty fast DNS- prefetching is activated by default
Issues :
1)As I was seeing Process Explorer, each tab process runs in a sandboxed process with the unsandboxed browser process as the parent but when the browser process is sandboxed it doesn’t appear to be able to create it’s own sandboxed children as compared to firefox sandboxed can launch other process in the sandbox with charm .This ties me not to use 3 rd party Sandboxing tools
2)Popups are not blocked but open in minimized window. This feature can be used for malicious activities
3)Plugins used by Chrome may bypass the security model of Sandboxing looks like there is POC up and running on this attack
4)It also suffers from other Dos attack according to this advisory
Looks like the whole innovation of Chorme is driven by Green Border acquisition by Google last May 2007 like the patent “Methods and systems for providing a secure application environment using derived user accounts” (technology presumably incorporated in Chrome).
Here is the Chromium source code.
Google V8 JavaScript Engine Source Code
Will post some screen shots in the follow up post