Microsoft blasts Google over Chrome Frame plug-in
Doubles IE8's potential security problems, cripples privacy mode, argues exec
September 24, 2009 04:05 PM ETBrowser wars
- Microsoft's IE9 to tap hardware for speed boost
- IE9 will close performance gap, Microsoft says
- Firefox 3.6 locks out rogue add-ons
- 1-in-4 now use Firefox to surf the Web
- Google slates Mac Chrome beta for early December
- Firefox flaws account for 44% of all browser bugs
- Mozilla plans major Firefox interface overhaul
- Google's Chrome browser share growth trumps Firefox's
- Apple gets best spot in EU browser 'ballot screen,' Mozilla says
- Mozilla will let rival browsers run Firefox security tool
Computerworld - Microsoft today warned Internet Explorer (IE) users that they could double their security woes if they installed and used Google Chrome Frame, the plug-in that provides better JavaScript performance and adds support for HTML 5 to Microsoft's browser.
"It's not necessarily that plug-ins aren't or can't be secure, but that running a browser within a browser doubles the potential attack surface in a way that we don't see is particularly helpful," said Amy Bazdukas, Microsoft's general manager for IE.
Bazdukas also said that by running Chrome Frame, IE8 users were unwittingly discarding all the private browsing protections that Microsoft built into its newest browser.
"Chrome Frame breaks the privacy model of IE," she claimed. "Users are not going to be able to use IE's privacy features, something that's not made apparent to users. They're essentially circumvented."
Bazdukas also maintained that IE8's browser history deletion feature is crippled by Chrome Frame; users who decide to erase the history may think it's working when it's not.
In a statement earlier today, Microsoft said using Chrome Frame is not "a risk we would recommend our friends and families take." Bazdukas, however, got more specific.
"We're not saying that there's a specific security vulnerability in Chrome Frame, but the concern that plug-ins in general have had regarding security issues adds a new potential threat when Chrome Frame is used. Users have told us that they're looking for a better and safer browser, and we can't see how [using Chrome Frame] will deliver that."
Released Tuesday, Chrome Frame lets IE utilize the Chrome browser's WebKit rendering engine, as well as its high-performance V8 JavaScript engine. Google pitched the plug-in as a way to instantly improve the performance of the notoriously slow IE, and as a way for Web developers to support standards IE can't handle, including HTML 5.
Chrome Frame
Additional Resources



Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.
White Papers & Webcasts
Share our Strength
Download Now
Lower the Cost and Complexity of a Mobile Workforce through Automation
Download This Resource Now!
Top 10 Things to Know about Data Protection
Download Now
Managing Mobility: Improve Data Security, Compliance and Manageability
Download This Resource Now!
Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...
Ponemon Study: The Business Risk of a Lost Laptop
Download Now
Security Convergence Equals Network Security Cost Savings
Listen to IBM Internet Security Systems' take on network security convergence.
Airport Insecurity: The Case of Lost Laptops
Download Now
Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...
