'The founder of Rendition Security believes his daughter "is more safe
on a Chromebook than a Windows laptop," and he's not the only one.
CNET's staff reporter argues that Google's push for simplicity, speed,
and security "ended up playing off each other." mspohr shared this
Heading to my first security conference last year, I expected to see a
tricked-out laptop running on a virtual machine with a private network
and security USB keys sticking out -- perhaps something out of a scene
from "Mr. Robot." That's not what I got. Everywhere I went I'd see
small groups of people carrying Chromebooks, and they'd tell me that
when heading into unknown territory it was their travel device... "If
you want prehardened security, then Chromebooks are it," said Kenneth
White, director of the Open Crypto Audit Project. "Not because they're
Google, but because Chrome OS was developed for years and it
explicitly had web security as a core design principle...." Drewry and
Liu focused on four key features for the Chromebook that have been
available ever since the first iteration in 2010: sandboxing, verified
boots, power washing and quick updates. These provided security
features that made it much harder for malware to pass through, while
providing a quick fix-it button if it ever did.
That's not to say Chrome OS is impervious to malware. Cybercriminals
have figured out loopholes through Chrome's extensions, like when
37,000 devices were hit by the fake version of AdBlock Plus. Malicious
Android apps have also been able to sneak through the Play Store. But
Chrome OS users mostly avoided massive cyberattack campaigns like
getting locked up with ransomware or hijacked to become part of a
botnet. Major security flaws for Chrome OS, like ones that would give
an attacker complete control, are so rare that Google offers rewards
up to $200,000 to anyone who can hack the system.
The article argues that "Fewer software choices mean limited options
for hackers. Those are some of the benefits that have led security
researchers to warm up to the laptops...
"Chrome OS takes an approach to security that's similar to the one
Apple takes with iOS and its closed ecosystem."'
-- source: https://tech.slashdot.org/story/18/03/31/0443257
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174