Google rolls out new security features in Chrome for Windows

[HarborFront]

Google announced today that it is in the process of rolling out an update for Chrome for Windows that improves the security of the web browser.

Chrome news have hit a rough patch in recent months thanks to malicious extensions doing all sorts of negative things when they are installed on user systems.

The new safety features that Google announced today don't remedy that situation, but they may help Chrome users on Windows in other ways.

Philippe Rivard, Chrome Cleanup product manager at Google lists three improvements that Google added to Chrome to "help Chrome for Windows users recover from unwanted software infections".

The first feature detects if Chrome settings have been changed without user consent. The browser displays information on those changes to the user, and it is up to the user to restore the original settings or to hit the cancel button to leave the settings as they are.

Rivard notes that users can reset their profiles at any time by loading the chrome://settings/resetProfileSettings internal page of Chrome.

This feature is already available in recent versions of Google Chrome.

The second feature acts like an unwanted software cleaner on the Windows machine. Chrome detects the installation of unwanted software.

A prompt is displayed that gives users the option to remove the unwanted software from the operating system, and to restore Chrome settings so that the browser works normally.

Scenarios where users may see the prompts include the following ones:

• Popup ads are displayed and won't go away.
• Chrome homepage or search engine are changed, and keep changing to pages and services without your permission.
• Unwanted Chrome extensions or toolbars are installed, and come back when removed.
• Redirections to unfamiliar sites happen regularly.

Last but not least, Google partnered up with IT company ESET to improve the detection and removal of unwanted software. This means basically, that Chrome will assist Windows users who have unwanted software on their devices with the recovery.

Closing Words

Google benefits from improvements in regards to unwanted software and manipulation by extensions in two ways: first in giving users a sense of security and assistance, and second in restoring default values for homepage and search.

Chrome's improved cleanup routines are no replacement for antivirus software however. The browser will detect only unwanted software and changes made to Chrome, and not other malicious behavior (unless it is caught by safe browsing).

It remains to be seen how the new routines impact the browser's performance and memory usage.

Google rolls out new security features in Chrome for Windows - gHacks Tech News

 

[HarborFront]

If your AV/AM can detect and stop BHOs and you are using ESET then the mentioned new features are of no use

I don't find them useful since my system qualifies for the above criteria

 

[Handsome Recluse]

What about other Chromium based browsers though? This might still be useful for them.

 

[CMLew]

If your AV/AM can detect and stop BHOs and you are using ESET then the mentioned new features are of no use

I don't find them useful since my system qualifies for the above criteria

What it could means is that if Google Chrome able to do that then why still need AV/AM to do it for you. Save a hassle/resources/money too.

 

[HarborFront]

What about other Chromium based browsers though? This might still be useful for them.

No mention of support for Chromium based browsers so not sure

 

[HarborFront]

What it could means is that if Google Chrome able to do that then why still need AV/AM to do it for you. Save a hassle/resources/money too.

Only for detection and removal of unwanted software. No mention of malware detection and removal.

 

[vtqhtr413]

Only for detection and removal of unwanted software. No mention of malware detection and removal.

Maybe one persons malware is another persons software or is it the other way around.

 

[Deleted member 65228]

I think this feature is really nice and can definitely be beneficial.

What it could means is that if Google Chrome able to do that then why still need AV/AM to do it for you. Save a hassle/resources/money too.

Haha. Well actually, it is better to rely on a stable and reputable AV/AM product for preventing such operations, because they have more control over the system and therefore can prevent attacks from malicious software to stop the identification of the changes.

For example, even though Google Chrome enforces anti-RCE (prevent code injection), you can still inject into all the processes from standard rights only with some tricks and then an attacker could spoof so when Google Chrome reads the config files it'll be tricked into believing the original information is there instead of alerting about a potential hijack... Try and do this with a good security product and I doubt it will be even remotely close to easy from user-mode alone, especially with standard rights.

It is still a good feature but is not the best idea to rely on it over your security solution if it monitors for browser hijacking!

 

[mlnevese]

Anything that helps people who do not know the first thing about security and are not interested or do no have the time to learn about it is welcome.

 

[HarborFront]

Just updated Google Chrome to v62.xxx but can't find the 3 new features mentioned in the OP.

Anyone knows whether can enable/disable the 3 new features?

Thanks