4 ms·
Do you know that security wise, since Chrome does not need administrative privs to install it means any bug, trojan, etc, can replace the Chrome binary and use
by zobzu 15y ago
Do you know that security wise, since Chrome does not need administrative privs to install it means any bug, trojan, etc, can replace the Chrome binary and use it to capture/control/send/etc anything users are running?
That's the main reason why app INSTALLS should require admin privileges in general.
That's also why Chrome model for updates is a double-edged sword, and security wise its bad.
For Entreprises, you should be able to manually push out Chrome updates without getting any admin prompts or the need for admin privileges.
Regardless, for non-Entreprise use, seemless update of the browser is something one wants to have.
AFAIK Firefox plans to have an authenticated updater service running for that. It means you can't subvert the Firefox binaries to capture/control/whatever the user's pc as you need admin privileges to upgrade.
And the updater process is a tiny process that verifies signatures before upgrade, thus the likehood that it gets compromised or has bugs is very low (specially compared to browsers which are one of the most complex piece of software ever made)