Tech & Science Chrome has a new way to keep Spectre hackers at bay

08:45  13 july  2018
08:45  13 july  2018 Source:   cnet.com

Russian hackers 'targeted Ukraine's water supply'

  Russian hackers 'targeted Ukraine's water supply' An overflow station that cleans Ukraine's water supply has been targeted by Russian hackers, officials have claimed. The Security Service of Ukraine said Kremlin-sponsored attackers targeted "critical infrastructure" that sanitises the nation's clean water."In close cooperation with the administration of the company, [the Ukrainian security service] managed to prevent a potential man-made disaster," the agency added.There is an ongoing campaign of hostile cyber activities targeting Ukraine which appear to have originated in Russia - but this seems to be the first which directly put water sanitation at risk.

By adding new compartmentalization technology, Google's Chrome browser has taken a step to keep websites from stealing sensitive data. Google has been testing a stricter variation of this sort of partitioning to protect against Spectre , a new type of attack that Google and other researchers

By adding new compartmentalization technology, Google’s Chrome browser has taken a step to keep websites from stealing sensitive data. Google has been testing a stricter variation of this sort of partitioning to protect against Spectre , a new type of attackthat Google and other researchers

a close up of a keyboard: Google's Chrome browser logo © Provided by CNET Google's Chrome browser logo By adding new compartmentalization technology, Google's Chrome browser has taken a step to keep websites from stealing sensitive data.

Since Google first released it publicly in 2008, Chrome has divided work among multiple computing processes. That approach helps keep one tab's work from interfering with what's happening in another. Google has been testing a stricter variation of this sort of partitioning to protect against Spectre, a new type of attack that Google and other researchers revealed in January.

Google released the new security feature, called site isolation, to a limited number of Chrome users starting with the Chrome 67 release in May. Now it's "enabled for 99 percent of users on Windows, Mac, Linux and Chrome OS," Chrome team member Charlie Reis said in a blog post on Wednesday.

All Android users can now use YouTube's incognito mode

  All Android users can now use YouTube's incognito mode YouTube for Android just got a lot better at keeping secrets. The incognito mode the video platform has been testing since May is now rolling out to all Android users . Just like incognito for Chrome, the one for YouTube doesn't log what you watch, keeping your history squeaky clean. To access the feature, simply tap on your avatar to see the new "Turn on Incognito" option, which replaces the Sign Out button. If you choose to switch it on, you'll get a prompt reminding you that your school, employer and ISP will probably still see your activities.

Google has been testing a stricter variation of this type of partitions to protect against Specter , a new type of attack that Google and other researchers revealed in January. "Our team continues to work hard to optimize this behavior and keep Chrome updated and safe," Reis said in the blog post.

By adding new compartmentalization technology, Google’s Chrome browser has taken a step to keep websites from stealing sensitive data. Google has been testing a stricter variation of this sort of partitioning to protect against Spectre , a new type of attack that Google and other researchers

The move shows just how complicated Spectre and the related Meltdown attacks are to thwart. Tech companies that make processors, operating systems and browsers all scrambled to block attackers from using the vulnerabilities to snatch sensitive data like passwords or encryption keys. The problem is severe enough to have risen to the US Congress, where senators griped on Wednesday that they hadn't heard about Spectre sooner.

a screenshot of a cell phone: Chrome's site isolation technology partitions some computing processes to make  it harder for attackers using Spectre to snoop for sensitive data. © Provided by CBS Interactive Inc. Chrome's site isolation technology partitions some computing processes to make it harder for attackers using Spectre to snoop for sensitive data.

Uses more memory

Google's site isolation feature is a major change to Chrome. It affects a core part of the browser called the renderer, which turns website programming code into actual pixels on your phone or laptop screen. With site isolation, Chrome splits renderers into separate computing processes more often to wall off data better.

New Fiat 500 Spiaggina special edition models revealed

  New Fiat 500 Spiaggina special edition models revealed This year marks the 60th anniversary of the Fiat 500 Spiaggina ‘Jolly’: a quirky, open top beach cruiser version of the iconic city car. The former is a joint venture between design house Pininfarina and Garage Italia - a custom house owned by Lapo Elkann, the grandson of former Fiat CEO Gianni Agnelli.

Chrome has a new way to keep Spectre hackers at bay - CNET. Chrome 's site isolation technology partitions some computing processes to make it harder for attackers using Spectre to snoop for sensitive data.

By adding new compartmentalization technology, Google's Chrome browser has taken a step to keep websites from stealing sensitive data. That approach helps keep one tab's work from interfering with what's happening in another.

Unfortunately, that means Chrome needs more memory. The increase is about 10 to 13 percent for people with lots of tabs open, Google said in a project document. The good news, though, is that site isolation lets Google relax earlier restrictions on monitoring precise timing of browser actions it had adopted to make Spectre attacks harder.

"Our team continues to work hard to optimize this behavior to keep Chrome both fast and secure," Reis said in the blog post. And it's also working to bring site isolation to Chrome for Android, he said.

Site isolation, a ten-year project

Reis has been working on the site isolation technology for a decade, starting with his Ph.D. research, and the Chrome team began about six years ago, Chrome security leader Justin Schuh tweeted.

Eric Lawrence, a former Chrome security team member who now works on Microsoft's rival Edge browser, called the move "an extremely impressive achievement."

Timehop’s database breached compromising data of 21 million users

  Timehop’s database breached compromising data of 21 million users Timehop’s database breached compromising data of 21 million usersThe stolen data comprised mostly of user names and email addresses. Of the 21 million compromised user data, the phone numbers linked to 4.7 million accounts were also stolen.

By adding new compartmentalization technology, Google's Chrome browser has taken a step to keep websites from stealing sensitive data. Google has been testing a stricter variation of this sort of partitioning to protect against Spectre , a new type of attack that Google and other researchers

Too dangerous it way Chrome needs even more memory. Previous Ford decided to keep the US Fiesta ST around for one more year – Roadshow. Next New iPhones, iPad Pros, Mac mini and more — Is this Apple’s 2018 lineup?

"Google invested many engineer-years in a feature that initially seemed hopelessly out of whack from cost/benefit POV [point of view]," he tweeted. Then when Spectre arrived, site isolation suddenly became "an essential defense against a class of attack."

—   Share news in the SOC. Networks

Topical videos: