Protect your corporate IT network from hackers and other unwanted intruders with Proxy Sentinel™. Click here for all the details and get the peace of mind you deserve.
Back to our Homepage Proxy Sentinel™ high performance Internet proxy server and secure firewall solution Firewall Sentinel™ secure & powerful Internet firewall solution About Internet Security.ca and GCIS Frequently Asked Questions on Internet security issues Internet Security Industry News - Stay informed of what's happening Contact Internet Security.ca today and order your Proxy Sentinel™ or Firewall Sentinel™ server now!

Google criticizes Comodo for turning off Chrome security

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.

February 3, 2016

Google's internet security department is criticizing Comodo for turning off Chrome security in its popular browser.

Users who install Comodo Internet Security may not realize that their Chrome installation is replaced with Comodo's own browser, Chromodo.

That software isn't secure at all-- it's set as the default browser, and "all shortcuts are replaced with Chromodo links and all settings, cookies, etc are imported from Chrome.

"Worse, they also hijack DNS settings, among other very nasty practices!" said Google's security spokesperson Tavis Ormandy.

Chromodo is promoted as a private browser on Comodo's website, but it's not only not private, it's not remotely safe to use in the first place because it also disables Chrome's same-origin policy settings.

The same-origin policy enforces a security rule that one script can only access data in another script if they're both from the same site. Without it, users are exposed to malicious sites sniffing private data.

We can certainly understand Google's frustration with this. Google went public with the feature bug because Comodo was unresponsive, we're told. We would have done the same, by the way.

It's not the first time Comodo's been called out for s**tware. Last year, its PrivDog browser was slapped down by the U.S. Department of Homeland Security for man-in-the-middling users' SSL sessions takeovers.

Given that Comodo is also a SSL certificate authority (!) bypassing end user security is a serious breach of trust.

If you've got Comodo's browser installed on your machine, get rid of it! You'll be happy you did. Or we will say: "Well, we told you so!"

Source: Google.

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.


Home | Proxy Sentinel™ | Firewall Sentinel™ | FAQ | News | Sitemap | Contact
Copyright © Internet Security.ca    Terms of use    Privacy agreement    Legal disclaimer