Slashdot Mirror
Chrome Is Scanning Files on Your Computer, and People Are Freaking Out (vice.com)
Some cybersecurity experts and regular users were surprised to learn about a Chrome tool that scans Windows computers for malware. But there's no reason to freak out about it. From a report: Last year, Google announced some upgrades to Chrome, by far the world's most used browser -- and the one security pros often recommend. The company promised to make internet surfing on Windows computers even "cleaner" and "safer" adding what The Verge called "basic antivirus features." What Google did was improve something called Chrome Cleanup Tool for Windows users, using software from cybersecurity and antivirus company ESET.
[...] Last week, Kelly Shortridge, who works at cybersecurity startup SecurityScorecard, noticed that Chrome was scanning files in the Documents folder of her Windows computer. "In the current climate, it really shocked me that Google would so quietly roll out this feature without publicizing more detailed supporting documentation -- even just to preemptively ease speculation," Shortridge told me in an online chat. "Their intentions are clearly security-minded, but the lack of explicit consent and transparency seems to violate their own criteria of 'user-friendly software' that informs the policy for Chrome Cleanup [Tool]." Her tweet got a lot of attention and caused other people in the infosec community -- as well as average users such as me -- to scratch their heads.
[...] Last week, Kelly Shortridge, who works at cybersecurity startup SecurityScorecard, noticed that Chrome was scanning files in the Documents folder of her Windows computer. "In the current climate, it really shocked me that Google would so quietly roll out this feature without publicizing more detailed supporting documentation -- even just to preemptively ease speculation," Shortridge told me in an online chat. "Their intentions are clearly security-minded, but the lack of explicit consent and transparency seems to violate their own criteria of 'user-friendly software' that informs the policy for Chrome Cleanup [Tool]." Her tweet got a lot of attention and caused other people in the infosec community -- as well as average users such as me -- to scratch their heads.
It was widely announced and isn't exactly hidden. [link only works on Chrome 65]
0.0.0.0 *.scorecard.*[net,org,com,biz,*]
This is my concern as well, but on a larger scale. A lot of my customers insist on running Chrome in a Citrix XenApp or XenDesktop deployments. We already do what we can, including using VDI aware AV products (we we are forced to use them at all), to reduce unnecessary IOPS. Chrome is already a big resource hog (uses lots of RAM, bloats user profiles, etc) now they decided that they need to scan the OS and burn up IOPS as well? Thanks Google!
I browse on +1 so AC's need not respond, I won't see it.
Even if it's not actually dangerous, it certainly doesn't do good things for the speed of older hardware or heavily-loaded hardware.
The reduced longevity of a constantly reading spinning platter hard drive comes to mind also.
Dear Google. Dont destroy my hardware. K. TX.
"His name was James Damore."
In the settings page, chrome://settings/cleanup
The option is "Report details to Google" and it defaults to being Checked. When I uncheck it, then eventually shut down the Chrome process (on Windows), then restart Chrome and verify its status, it remains as Checked.
So, essentially, this option cannot be disabled except MAYBE momentarily. Is it a feature or a bug?
Wow..really? Do that many people really use Chrome as their browser of choice?
I know my experience is purely anecdotal, but I don't know any of my peers that use it and I work in IT.
I've pretty much stuck with FireFox since it came out, and use IE when I absolutely have to, and safari when I'm on a mac (or firefox).
I've tried chrome a time or two way back, but at that time it seemed so different than FF (almost no buttons)...so, I never really went back to it...I just mostly use FF and update it as needed.
Maybe it's an old person thing?
Heck, in some jobs I've worked (government) you have to get special dispensation to install chrome ON your furnished computer....
Light travels faster than sound. This is why some people appear bright until you hear them speak.........
Do that many people really use Chrome as their browser of choice?
Yes.
It's free. People look at "free" and salivate like Homer Simpson.
But they're actually being sold, and after realizing that, rationalize it and then get more free stuff. Android is a similar notion. Just being a consumer helps underwrite the cost of the product. Apple knows it, and there is no escaping the sale of the device user's info. Someone's buying it.
Does one need a smartphone every minute of every day? No, but like nicotine, opoids, and sugar, addicts are easy targets. Donuts? Sure. Cigarettes? Sure. Opoids? Sure feels good. No one wants to walk away, yet everyone decries monetizing consumers. It's difficult not to have it both ways, even if you're Richard Stallman. This stuff gets paid for, somehow, some way. Until people realize they're the product, they'll continue to have moments of cognitive dissonance.
---- Teach Peace. It's Cheaper Than War.