Researchers accuse Google of plotting to undercut Firefox
NSS Labs argues 'Chrome-is-most-secured-browser' report is part of campaign to trim Firefox's share
Computerworld - A security testing firm today said a recent report that named Google's Chrome as the most secured browser was flawed -- and part of a campaign by Google to undermine Mozilla's Firefox.
Google denied the charges.
The work done by Denver-based security consultancy Accuvant, which released a report last week naming Chrome as more secured than either Firefox or Microsoft's Internet Explorer (IE), was paid for by Google.
That raised the hackles of NSS Labs, a California company that tests browser security and antivirus software.
"This is a vendor-funded paper, and in these cases, the vendor is going to drive the methodology [of the testing], which appears to be the case here," said Vikram Phatak, the chief technology officer of NSS Labs, in an interview today.
When reminded that NSS Labs has conducted vendor-funded browser security research in the past -- Microsoft sponsored several NSS tests on anti-malware blocking technologies -- Phatak replied, "There's a reason why we don't do that anymore."
Calling Accuvant's testing process "skewed toward Chrome," Phatak argued that the consulting company's researchers ignored some key Firefox security features -- notably "frame poisoning," which blocks exploits of most layout code crashes; didn't give enough weight to such things as frequent security updates; and failed to use real-world anti-browser malware in its testing.
But Phatak and Rick Moy, president of NSS Labs, leveled more serious charges against Google than the allegedly-slanted report.
The two tied the release of the report with two other factors -- the apparent non-renewal of the Google-Mozilla search contract and a recent rise in Chrome's anti-malware blocking effectiveness -- to conclude that Google was running a campaign to knock Firefox out of the market.
"This tells a story, that Google is looking to go it alone now, and examining their position vis-a-vis Mozilla," said Phatak. "Google paid for this report, and it's part of a marketing campaign that's probably aimed at Firefox to cut off Firefox's revenues, cut if off from the Safe Browsing service, and then put out a report that says Firefox is less secure than Chrome."
"I think there's consistency in the data points," said Moy.
While Mozilla has said it was "in active negotiations" with Google about a new contract, it has declined to announce whether it has reached a deal with its long-time partner. That contract expired last month.
Income from the Google-Mozilla contract accounted for 84% of the $123 million the latter reported in revenue for 2010, the last year Mozilla has made public its finances.
The other factor Phatak and Moy used to bolster their claim of a concerted effort by Google to squash Mozilla's Firefox came from NSS Labs' own testing, which showed a five-fold jump in Chrome's effectiveness blocking malware in an 11-day period from Nov. 22 to Dec. 2.
- Google reverses field, promises to restore Chrome's scrollbar arrows
- Update: Google ships Chrome 33, patches 28 bugs
- Mozilla's top exec defends in-Firefox ads, revenue search
- Mozilla taps in-Firefox ads as it searches for more revenue
- Mozilla ships Metro Firefox beta for Windows 8
- Mozilla defers Firefox's new 'Australis' UI to April
- Mozilla resets Metro Firefox ship date to mid-March
- Mozilla ships Firefox 26 with opening click-to-play move
- Mozilla banked $274M in '12 from Google-Firefox search deal
- Google trumpets Chrome's SPDY gains
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The Threat Landscape Hardly a day goes by without the discovery of a new cyberthreat somewhere in the world! But how do you keep up with...
- Security for Virtualization In the rush to implement virtualization, security has become second. So while the business benefits are clear, the risks are less well documented...
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,... All Malware and Vulnerabilities White Papers | Webcasts