Slashdot Mirror

← Back to Stories (view on slashdot.org)

Google Chrome Is Getting Automatic Blocking of Malicious Downloads

Posted by timothy on from the whose-opinion-of-the-malware-though dept.

An anonymous reader writes "Google today announced Chrome is getting an automatic download blocking feature for malware. Google has already added the new functionality to the latest build of Chrome Canary. All versions of Chrome will soon automatically block downloads and let you know in a message at the bottom of your screen. You will be able to "Dismiss" the message, although it's not clear if you will be able to stop or revert the block."

4 of 138 comments (clear)

  1. Great news! by sootman · · Score: 5, Insightful

    Now, can you let me choose for myself which filetypes are safe or not? For my job, I have to download many PDFs (up to 100 at a time) and Chrome asks me EVERY... SINGLE... FUCKING... TIME "This type of file can harm your computer. Do you want to keep <filename> anyway?"

    LISTEN IDIOT: These PDFs come from a trusted source. Yes, I have to download them. No, I don't want to view them in the browser right this second. Also, I'm on a Mac, and also also, I don't use Acrobat, and also also also, this is my work machine, and IF anything would happen to it, I'd let I.T. blow it away and re-image it if needed. LET ME DOWNLOAD THE GODDAMN FILE. Every few months I search to see if there's a way to disable this, and so far I've come up empty.

    Needless to say, I don't use Chrome for this part of my job.

    --
    Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
  2. Microsoft tried this before by tepples · · Score: 4, Insightful

    Microsoft has tried something similar. Each distinct executable has to build up a reputation over some long period before IE SmartScreen stops flagging it as "not commonly downloaded". The only way to make an executable build up reputation faster is to apply for an Authenticode software publisher certificate from a commercial CA ($$$) and keep it renewed ($$$ per year), which lets good reputation spill over from other executables from the same publisher that have earned good reputation. This especially messes with the release early, release often mentality of amateur free software developers who might not be willing to form an LLC and buy and maintain an Authenticode certificate.

    1. Re:Microsoft tried this before by Riddler+Sensei · · Score: 4, Insightful

      God, that sounds like extortion.

      "It'd be a shame if we told the user that your software might maybe sorta kinda be malware."

  3. Re:Bah... by lgw · · Score: 4, Insightful

    Sure, that's one workaround. He found an easier workaround - switch to a less arrogant browser.

    --
    Socialism: a lie told by totalitarians and believed by fools.