Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Browsers
Chrome & Chromium
Chrome for Android Enables Site Isolation Security Feature for All Sites with Login
Message
<blockquote data-quote="DDE_Server" data-source="post: 840111" data-attributes="member: 65727"><p><a href="https://1.bp.blogspot.com/-tvKa5DwBuhc/Xaio63r_s6I/AAAAAAAA1cg/v2xBH2B0g24EHin4jJRAGEDm6oloIE6ZACLcBGAsYHQ/s728-e100/google-chrome-site-isolation-security.jpg" target="_blank"></a></p><p><a href="https://1.bp.blogspot.com/-tvKa5DwBuhc/Xaio63r_s6I/AAAAAAAA1cg/v2xBH2B0g24EHin4jJRAGEDm6oloIE6ZACLcBGAsYHQ/s728-e100/google-chrome-site-isolation-security.jpg" target="_blank"><img src="https://1.bp.blogspot.com/-tvKa5DwBuhc/Xaio63r_s6I/AAAAAAAA1cg/v2xBH2B0g24EHin4jJRAGEDm6oloIE6ZACLcBGAsYHQ/s728-e100/google-chrome-site-isolation-security.jpg" alt="google chrome site isolation security " class="fr-fic fr-dii fr-draggable " style="" /></a></p><p>After enabling '<a href="https://thehackernews.com/2018/07/google-chrome-site-isolation.html" target="_blank">Site Isolation</a>' security feature in Chrome for desktops last year, Google has now finally introduced 'the extra line of defence' for Android smartphone users surfing the Internet over the Chrome web browser.</p><p></p><p>In brief, Site Isolation is a security feature that adds an additional boundary between websites by ensuring that pages from different sites end up in different sandboxed processes in the browser.</p><p></p><p>Since each site in the browser gets its own isolated process, in case of a browser flaw or Spectre like side-channel vulnerability, the feature makes it harder for attackers or malicious websites to access or steal cross-site data of your accounts on other websites.</p><p></p><p></p><p>Site Isolation helps protect many types of sensitive data, including authentication cookies, stored passwords, network data, stored permissions, as well as cross-origin messaging that help sites securely pass messages across domains.</p><p></p><p><a href="https://1.bp.blogspot.com/-aQ-d1kCVBdA/XaimDqnHA3I/AAAAAAAA1cM/flX46BPzv-0LmKoyLAIIq9B2-TVTnWJIwCLcBGAsYHQ/s728-e100/chrome-site-isolation.jpg" target="_blank"><img src="https://1.bp.blogspot.com/-aQ-d1kCVBdA/XaimDqnHA3I/AAAAAAAA1cM/flX46BPzv-0LmKoyLAIIq9B2-TVTnWJIwCLcBGAsYHQ/s728-e100/chrome-site-isolation.jpg" alt="chrome site isolation " class="fr-fic fr-dii fr-draggable " style="" /></a></p><p></p><p>The feature gained attention in January 2018, when it was in the experimental zone and <a href="https://thehackernews.com/2018/01/intel-kernel-vulnerability.html" target="_blank">two critical CPU vulnerabilities</a> were discovered, called <a href="https://thehackernews.com/2018/01/meltdown-spectre-patches.html" target="_blank">Spectre and Meltdown</a>, that allowed malicious websites to launch <a href="https://thehackernews.com/2019/08/swapgs-speculative-execution.html" target="_blank">speculative side-channel attacks</a> directly from the browser.</p><p></p><p></p><p></p><p>Soon after that, in July 2018, Google decided to enable the <a href="https://thehackernews.com/2018/07/google-chrome-site-isolation.html" target="_blank">Site Isolation feature in Chrome</a> for desktops and promised to the extent the same for Chrome users on Android to help them defend against even fully compromised processes.</p><p></p><p><span style="font-size: 22px"><strong>Performance Tradeoff: Chrome for Android Only Isolates Sites with Login</strong></span></p><p></p><p>Today, the tech giant has finally announced the availability of this feature with the release of Chrome 77 for Android, which has now been enabled for 99% of users who are running Android devices with a sufficient amount of RAM i.e., at least 2GB, with a 1% holdback to monitor and improve performance.</p><p></p><p>Most importantly, it should be noted that unlike Chrome for desktops, the site isolation feature in Chrome for Android doesn't sandbox all websites.</p><p></p><p></p><p>Instead, in an attempt to keep up with the device performance, the Site Isolation on Chrome 77 for Android has been re-designed to protect only high-value websites where users log in with passwords.</p><p></p><p></p><p></p><p></p><p></p><p>For example, when you visit a banking or e-commerce site within the Chrome browser on your Android phone and log in to your account, Chrome will observe a password interaction and automatically turn on the Site Isolation feature.</p><p><a href="https://1.bp.blogspot.com/-s23ENxm2S4c/XaimeUeDmpI/AAAAAAAA1cU/ShFbdSoddu4zeSXs2e7U6yD4NAqsTBmZQCLcBGAsYHQ/s728-e100/chrome-site-isolation-security.jpg" target="_blank"><img src="https://1.bp.blogspot.com/-s23ENxm2S4c/XaimeUeDmpI/AAAAAAAA1cU/ShFbdSoddu4zeSXs2e7U6yD4NAqsTBmZQCLcBGAsYHQ/s728-e100/chrome-site-isolation-security.jpg" alt="chrome site isolation" class="fr-fic fr-dii fr-draggable " style="" /></a></p><p>Eventually, the browser will render that site in its own dedicated renderer process, helping protect your sensitive information on that site from all other sites.</p><p></p><p>Moreover, Chrome will keep a list of your isolated sites stored locally on your device, which helps the browser to automatically turn on the feature whenever you revisit one of those sites.</p><p></p><p>However, if you want to forcefully enable this protection to isolate all websites without caring about the performance of your device, you can manually opt-in to full Site Isolation via chrome://flags/#enable-site-per-process setting page. </p><p>The Link :</p><p>[URL unfurl="true"]https://thehackernews.com/2019/10/chrome-site-isolation-android.html[/URL]</p></blockquote><p></p>
[QUOTE="DDE_Server, post: 840111, member: 65727"] [URL='https://1.bp.blogspot.com/-tvKa5DwBuhc/Xaio63r_s6I/AAAAAAAA1cg/v2xBH2B0g24EHin4jJRAGEDm6oloIE6ZACLcBGAsYHQ/s728-e100/google-chrome-site-isolation-security.jpg'] [IMG alt="google chrome site isolation security "]https://1.bp.blogspot.com/-tvKa5DwBuhc/Xaio63r_s6I/AAAAAAAA1cg/v2xBH2B0g24EHin4jJRAGEDm6oloIE6ZACLcBGAsYHQ/s728-e100/google-chrome-site-isolation-security.jpg[/IMG][/URL] After enabling '[URL='https://thehackernews.com/2018/07/google-chrome-site-isolation.html']Site Isolation[/URL]' security feature in Chrome for desktops last year, Google has now finally introduced 'the extra line of defence' for Android smartphone users surfing the Internet over the Chrome web browser. In brief, Site Isolation is a security feature that adds an additional boundary between websites by ensuring that pages from different sites end up in different sandboxed processes in the browser. Since each site in the browser gets its own isolated process, in case of a browser flaw or Spectre like side-channel vulnerability, the feature makes it harder for attackers or malicious websites to access or steal cross-site data of your accounts on other websites. Site Isolation helps protect many types of sensitive data, including authentication cookies, stored passwords, network data, stored permissions, as well as cross-origin messaging that help sites securely pass messages across domains. [URL='https://1.bp.blogspot.com/-aQ-d1kCVBdA/XaimDqnHA3I/AAAAAAAA1cM/flX46BPzv-0LmKoyLAIIq9B2-TVTnWJIwCLcBGAsYHQ/s728-e100/chrome-site-isolation.jpg'][IMG alt="chrome site isolation "]https://1.bp.blogspot.com/-aQ-d1kCVBdA/XaimDqnHA3I/AAAAAAAA1cM/flX46BPzv-0LmKoyLAIIq9B2-TVTnWJIwCLcBGAsYHQ/s728-e100/chrome-site-isolation.jpg[/IMG][/URL] The feature gained attention in January 2018, when it was in the experimental zone and [URL='https://thehackernews.com/2018/01/intel-kernel-vulnerability.html']two critical CPU vulnerabilities[/URL] were discovered, called [URL='https://thehackernews.com/2018/01/meltdown-spectre-patches.html']Spectre and Meltdown[/URL], that allowed malicious websites to launch [URL='https://thehackernews.com/2019/08/swapgs-speculative-execution.html']speculative side-channel attacks[/URL] directly from the browser. Soon after that, in July 2018, Google decided to enable the [URL='https://thehackernews.com/2018/07/google-chrome-site-isolation.html']Site Isolation feature in Chrome[/URL] for desktops and promised to the extent the same for Chrome users on Android to help them defend against even fully compromised processes. [SIZE=6][B]Performance Tradeoff: Chrome for Android Only Isolates Sites with Login[/B][/SIZE] Today, the tech giant has finally announced the availability of this feature with the release of Chrome 77 for Android, which has now been enabled for 99% of users who are running Android devices with a sufficient amount of RAM i.e., at least 2GB, with a 1% holdback to monitor and improve performance. Most importantly, it should be noted that unlike Chrome for desktops, the site isolation feature in Chrome for Android doesn't sandbox all websites. Instead, in an attempt to keep up with the device performance, the Site Isolation on Chrome 77 for Android has been re-designed to protect only high-value websites where users log in with passwords. For example, when you visit a banking or e-commerce site within the Chrome browser on your Android phone and log in to your account, Chrome will observe a password interaction and automatically turn on the Site Isolation feature. [URL='https://1.bp.blogspot.com/-s23ENxm2S4c/XaimeUeDmpI/AAAAAAAA1cU/ShFbdSoddu4zeSXs2e7U6yD4NAqsTBmZQCLcBGAsYHQ/s728-e100/chrome-site-isolation-security.jpg'][IMG alt="chrome site isolation"]https://1.bp.blogspot.com/-s23ENxm2S4c/XaimeUeDmpI/AAAAAAAA1cU/ShFbdSoddu4zeSXs2e7U6yD4NAqsTBmZQCLcBGAsYHQ/s728-e100/chrome-site-isolation-security.jpg[/IMG][/URL] Eventually, the browser will render that site in its own dedicated renderer process, helping protect your sensitive information on that site from all other sites. Moreover, Chrome will keep a list of your isolated sites stored locally on your device, which helps the browser to automatically turn on the feature whenever you revisit one of those sites. However, if you want to forcefully enable this protection to isolate all websites without caring about the performance of your device, you can manually opt-in to full Site Isolation via chrome://flags/#enable-site-per-process setting page. The Link : [URL unfurl="true"]https://thehackernews.com/2019/10/chrome-site-isolation-android.html[/URL] [/QUOTE]
Insert quotes…
Verification
Post reply
Top
