Slashdot Mirror
Microsoft Tests a Secured Edge Browser For Business (techradar.com)
An anonymous reader writes: Microsoft is in the testing stage of a new feature in its Edge browser for Windows 10 that is malware-proof as it partitions the browser window from the rest of the computer. This will be a welcome addition for users who are worried about the legitimacy of sites they want to visit. The new feature, catchily dubbed Windows Defender Application Guard, is part of the recently launched Windows Insider Previews. In order to access it you'll need to be a member of Microsoft's business service Enterprise, and have your settings calibrated so you're in the testing group called Fast Ring. Application Guard works by creating a virtual PC that is entirely separate from all storage, other apps, and the Windows 10 Kernel, meaning that the browser should be completely impervious to malware.
"Microsoft attests Edge browser is insecure by nature" as it does try to develop a separate "secure one"?
-><- no
And we dub it Edge-tanic. Meanwhile, the rest of us wonder why only businesses get a malware proof browser.
That's like telling your wife you wore a condom every time you visited a whore house in Haiti.
Copyright (c) 1990 - 2014 Dice. All rights reserved. Use of this comment is subject to certain Terms and Conditions.
It's a copy of Edge running in a virtual machine. How else would it be "separate from the kernel"?
The world's burning. Moped Jesus spotted on I50. Details at 11.
Because nobody has escaped a VM before. It may be difficult, but to say "impossible" is only challenging the hackers of the world.
This has been a security precaution that people have taken for a while, running their browser in a virtual machine, so if malvertising or some other browser based attack comes along, the VM gets scrozzled and easily rolled back to a snapshot, with the bad stuff kept well away from anything useful.
I am glad MS is doing this.
MS never learns. they are still trying to force feed their browser and are probably going to get slapped by the EU commission and possibly a few others fro anti-trust violatios. Windows 10 S was a real interesting POS. "Get Windows 10 Professional to get default browser change ability". WTF. Time for Linux, unless you are a gamer I guess.
"Imagination is more important than knowledge" - Einstein
Hackers around the world are now saying "Challenge Accepted...". With all the corporate VPNs that work via the browser, I'm sure this is going to cause some compatibility issues somewhere.
If you don't want to get owned like a poor end user by our insecure malware pay us more money and we'll give you a version that's secure.
Personally I think it's going to take more than adding another layer of indirection. https://en.wikipedia.org/wiki/...
Firefox is on a better track using language imposed constraints (e.g. Rust) to improve security.
Are two words never to be used in any sentence unless "not" is between them.
should be given very long prison sentences.
If one wants to avoid malware, it is indeed a good idea to keep it away from the windows 10 kernel.
Sounds like "Fool Proof", which I always wondered if it truly meant something was: 1) unassailable by fools, or 2) legal proof that there are, in fact, fools.
in a lot of cases, which is probably why they're targeting business.
Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
The summary adds the words "for business" to the article, apparently without justification. Yes, the preview is part of the Enterprise offerings at this point, but there's no reason not to assume the final version will be available to everyone.
This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
In the same way that flying on broomsticks is safe. Most people don't try it, but it doesn't end well for those who do.
Maybe the feature is "for users who are worried about the legitimacy of sites they want to visit" AND CLICK ANYWAYS?
Or maybe the summary is wrong, and it's really a feature for the security team, and not the user.
is that there are too many software packages in use by organizations that require legacy support that won't work within many new browsers. My company has software that requires IE9 with outdated plugins that haven't been developed since 2003. It's the only software that the company makes avaivable to interface with their engines. And the same employees have requirements for newer versions of IE, Firefox or Chrome. Then there are the Java apps that won't run in Firefox or Chrome anymore even with the latest Java release installed.
It's a fricken nightmare anymore.
"A plan fiendishly clever in its intricacies"- Homer Simpson
Windows Server and Windows IOT don't support Edge. Those releases only support Internet Explorer. So it is awesome that they are adding security, but can they please add it to all OS editions? It's silly that servers and small devices are still vulnerable.
This just means that the browser is isolated so that if it has a flaw the malware can't access other things (unless it can manage to get out of the VM, which isn't completely unknown).
Admittedly, it's useful for some people, but not revolutionary.
This is similar to Citrix or Microsoft's existing RemoteApp technology.
Or I could roll my own with vmware with some effort.
Microsoft is in the testing stage of a new feature in its Edge browser for Windows 10 that is malware-proof as it partitions the browser window from the rest of the computer.
Whew! So nobody can see my info except Microsoft, Microsoft's computers back at the ranch, their official keystroke reporter, screen snapshotter reporter, and anybody who pays for Microsoft advertising, including government agencies.
Finally some security.
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
Us as consumers get the un-secured version?
This will work well, as long as you never access sensitive information through the web browser. Because nobody ever does that.
You assholes couldn't have done that before releasing it on the public? wtf?
Microsoft Tests a Secured Edge Browser For Business... ...and nobody cares.
Perhaps they might want to provide a secure business orientated operating system BEFORE they think about the browser ?
I work in a financial services environment, we don't trust Win10 because we cannot lock it down in the way that we can lock down Win7, not even enterprise edition allows us to provide the secure environment demanded by our clients and compliance auditors. And before you say Win10 is more secure, it's not about protection from viruses and trojans - trust me when I say we already have an environment protected from those, it's about security from data loss and staff meddling, Win 10 allows people to play around too much and its far too leaky in terms of data being transmitted back to MS.
That leaves me with a headache but it's one that I don't have to solve until 2019 so perhaps MS will release a secure business OS which can be fully locked down to guarantee no data leakage and allow businesses like mine to fully control the environment in the next couple of years.