Google Chrome Malware Protection Question

[N918KT]

So I am now using Google Chrome exclusively instead of Internet Explorer because I think it will protect me more from malware.

I have just one question about it's phishing and malware protection setting:

I know it will warn you of websites that have malware in it but what about specific web pages within a certain website? If one web page of a website is clean but another has malware, will it warn you? Or is the malware protection just a blanket warning for one website as a whole?

 

[housefly]

Heard on the news yesterday that a bunch of passwords were hacked from google.

 

[N918KT]

Also, how effective is the malware protection setting on Google Chrome?

 

[comanchepilot]

use a Mac. . . no one ever steals Mac pwds . . . or hacks into mac systems. Not worth the effort - even now.

 

[RJM62]

So I am now using Google Chrome exclusively instead of Internet Explorer because I think it will protect me more from malware.

I have just one question about it's phishing and malware protection setting:

I know it will warn you of websites that have malware in it but what about specific web pages within a certain website? If one web page of a website is clean but another has malware, will it warn you? Or is the malware protection just a blanket warning for one website as a whole?

You're kidding, right?

-Rich

 

[Jim_R]

Heard on the news yesterday that a bunch of passwords were hacked from google.

No, they weren't "hacked from Google". A bunch of passwords to all kinds of sites were collected via malware. 97% of the passwords were associated with users in The Netherlands. 1,943 were US users (0.1% of the affected users).

 

[RJM62]

Using the same password for multiple sites or services is bad practice. If even one of those sites is hacked, or if your password is compromised in any other way, miscreants can access every site you're registered on. That's why Google, like every other company on the interwebz, urges users to use a different password for every site they log on to.

Except, of course, for Google's sites. Google wants you to use a common login for every single Google service, whether it's watching dumb cat videos on YouTube, reading your mail, working with Google Docs, using your Android phone, or administering your AdWords or AdSense accounts. By any measure of common sense, that would seem a bad idea; but because it makes it easier for Google to track everything you do on the Internet (and even on your phone), they make a convenient exception in their own case.

So please excuse my vigorously raised eyebrows when you suggest that using Google Chrome somehow enhances your Internet security and privacy. I rate Google's concern for user privacy about as highly as I do the NSA's.

-Rich

 

[ClimbnSink]

I thought google was the NSA

 

[Jim_R]

Google wants you to use a common login for every single Google service, whether it's watching dumb cat videos on YouTube, reading your mail, working with Google Docs, using your Android phone, or administering your AdWords or AdSense accounts. By any measure of common sense, that would seem a bad idea; but because it makes it easier for Google to track everything you do on the Internet (and even on your phone), they make a convenient exception in their own case.

How, exactly, is this so different from any other company that offers multiple services under a single umbrella ID? For example, one Apple ID is used to access iTunes store purchases, iMessage, iCloud, FaceTime, etc.

The average user leans far more toward the "convenience" side than the "security" side of the convenience vs. security spectrum. They only see multiple passwords as an annoyance. Any company nowadays that forces multiple IDs/logins for their services only looks ridiculous and unnecessarily annoying from the average consumer's perspective, and that's bad for business.

 

[CT4ME]

I don't think there is much difference these days... They don't attack the OS and browsers that much anymore. It's far easier to use "social engineering" and just trick you into clicking on something. Then, they can do anything they want. The first thing they do is add all sorts of extensions/add-ons in your browser(s), change your home page, and change your search engines. Then you'll be redirected back and pickup the infections over and over.

 

[RJM62]

How, exactly, is this so different from any other company that offers multiple services under a single umbrella ID? For example, one Apple ID is used to access iTunes store purchases, iMessage, iCloud, FaceTime, etc.

A pox on Apple, as well.

The average user leans far more toward the "convenience" side than the "security" side of the convenience vs. security spectrum. They only see multiple passwords as an annoyance. Any company nowadays that forces multiple IDs/logins for their services only looks ridiculous and unnecessarily annoying from the average consumer's perspective, and that's bad for business.

I think it's more ridiculous, and even worse for business, when users are expected to use the same login to comment on their dopey relative's video of their dog taking a bath, as they are to manage services like AdWords, AdSense, Google Wallet, and so forth where personally identifiable information -- including bank account, tax I.D., and credit card numbers -- are stored.

I agree with you: The average consumer is an idiot when it comes to computer security. They are unaware of the risks of doing stupid things like re-using passwords. That's why it's incumbent upon companies like Google, who claim to be experts, to enforce good security practices rather than acquiesce to their users' stupidity.

-Rich

 

[denverpilot]

So I am now using Google Chrome exclusively instead of Internet Explorer because I think it will protect me more from malware.



I have just one question about it's phishing and malware protection setting:



I know it will warn you of websites that have malware in it but what about specific web pages within a certain website? If one web page of a website is clean but another has malware, will it warn you? Or is the malware protection just a blanket warning for one website as a whole?

The malware warning in Chrome is based off of a lookup to a server to ask it if people have reported the website hosts malware.

It's not active malware protection and will do nothing to thwart malware from a non-reported website.

Trusting the browser, any browser -- the number one way to bring malware to a machine -- to guard against a malware infection ... is as silly as trusting the number one way to bring sperm to sex (a penis) to not get a woman pregnant.

Doesn't really matter that you changed penises... Er, browsers. You need something else.

 

[Jim_R]

I think it's more ridiculous, and even worse for business, when users are expected to use the same login to comment on their dopey relative's video of their dog taking a bath, as they are to manage services like AdWords, AdSense, Google Wallet, and so forth where personally identifiable information -- including bank account, tax I.D., and credit card numbers -- are stored.

As far as I know, there is no limitation on how many accounts you can create with Google. You can create an account for YouTube comments that's different from your AdSense account. Everybody's happy.

I agree with you: The average consumer is an idiot when it comes to computer security. They are unaware of the risks of doing stupid things like re-using passwords. That's why it's incumbent upon companies like Google, who claim to be experts, to enforce good security practices rather than acquiesce to their users' stupidity.

Um, right. And let's also require banks who issue credit cards, who are experts in financial matters, force people not to buy things on their credit cards that they have no business buying.

This is simply not a realistic expectation.