Dismiss this notice
EaseUS Partition Master Professional Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
SoftMaker Office Standard 2021 Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
Advanced Uninstaller PRO Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
O&O Defrag 24 Professional Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
O&O DiskImage 16 Professional Halloween 2020 Giveaway - [Only registered and activated users can see links Click here to register]

Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Microsoft aims to stop Chromium browsers from launching with elevated privileges
#1
Information 
Quote:Microsoft’s recent Chromium commit suggests that the company is working to add a way to “de-elevate” browsers, meaning that it does not want users to launch the browser with elevated or administrative privileges owing to security concerns. The commit termed “Automatically de-elevate browser when launched as elevated” was [Only registered and activated users can see links Click here to register] ([Only registered and activated users can see links Click here to register]) and has had some interesting responses.
 
The Redmond firm argues that the browser’s ability to automatically switch out of elevated privileges and re-launch under normal user privileges will help it solve problems such as executables downloaded from elevated browsers running with admin privileges, leading to easy access to system files. The company says that browser elevation is “unnecessary” and can cause problems.
 
However, the idea was met with skepticism from Google engineers who suggested that the choice must be with users and that a prompt to let users know of the elevated browser could be a better idea. Microsoft says that it experimented with a “bubble dialog” warning in the corner, but noticed that the prompt was displayed “way more often” when the browser was launched from an installed or other elevated programs, which led to many user complaints.
 
Currently, the discussions between the engineers point towards working on a feature to automatically de-elevate downloads and executables run from a browser with elevated privileges. This will ensure that users will explicitly run installers or other programs with elevated privileges if required, and avoid letting the browser automatically run elevated programs.

Source: [Only registered and activated users can see links Click here to register]
[-] The following 1 user Likes silversurfer's post:
  • harlan4096
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
GFYI [Official] O&O DiskImage 16 Profes...
Share feedback about...mjcn19 — 12:06
Qihoo 360 Total Security 10.8.0.1200
10.8.0.1200 releas...harlan4096 — 09:17
Avast_Security_News: The return of the M...
News on the (ma...harlan4096 — 09:00
Avast Blog_Tips & Advices: 5 tips for sa...
Let's face it: ...harlan4096 — 08:57
Avast_Security_News: Eliminating violenc...
In abusive rela...harlan4096 — 08:54

[-]
Birthdays
Today's Birthdays
No birthdays today.
Upcoming Birthdays
No upcoming birthdays.

[-]
Online Staff
There are no staff members currently online.

>