browser security - ReadWriteWeb http://www.readwriteweb.com/feeds/tag/browser security en Copyright 2012 Richard MacManus readwriteweb@gmail.com Wed, 15 Feb 2012 13:00:00 -0800 http://www.sixapart.com/movabletype/?v=4.35-en http://blogs.law.harvard.edu/tech/rss Internet Explorer 8 Has Arrived ie8_logo_long_mar09.pngAfter more than a year of beta testing, Microsoft released version 8 of Internet Explorer today. IE8 is definitely a better browser than IE7, and features quite a few important new functions, including accelerators, and web slices. IE8 is also significantly faster than IE7 and features a large number of new functions that make browsing the web easier and more secure. IE8 is an important upgrade for those users who are still using IE7, but we don't think that it offers enough compelling reasons for users of other browsers to switch back to Internet Explorer.

]]> ie8_final_screenshot_large.png

We described most of IE8's new features in previous posts about the beta and release candidates, so here is just a short reminder of some of the most interesting new additions to IE8:

  • Accelerators (think addons that make things like mapping addresses or initiating a blog post easier)
  • Web Slices (make information from sites available directly in your bookmarks)
  • InPrivate browsing (similar to the 'incognito' mode in Chrome or the 'private browsing' feature in Safari 4)
  • Built-in clickjacking prevention
  • Built-in phishing prevention
  • Crash recovery (similar to Chrome; when a tab crashes, it won't take down the whole browser and the content is automatically restored and reloaded)

Speed and Security

Of course, Microsoft has also stepped up its efforts to keep users secure (pdf), and IE8 also feels a lot faster than Microsoft's earlier browsers. Microsoft famously argued that its browser has been optimized to render the most popular pages on the Internet faster than any other browser, and that JavaScript performance, which is what all the other browser developers are focused on right now, is only a small part of the puzzle. To us, however, IE8 still didn't feel very fast, especially when compared to Google's Chrome.

Best New Features: Accelerators and Web Slices

In our opinion, the two features that stand out in the new version of IE8 (besides the obvious, like speed and better security) are accelerators and web slices. One web slice we especially liked was the OneRiot slice, which gives you a quick overview of the most popular videos on the Internet right now.

In its press release, though, Microsoft argues that performing simple tasks like mapping an address takes 7 steps in Firefox, but only 3 in IE8. Of course, that is only true if you don't install the Map This addon for Firefox. And that, of course, is a large part of Microsoft's problem. Thanks to the large number of Firefox addons and other tools like Greasemonkey, you can easily replicate most of the new features from IE8 in Firefox.

Verdict

Overall, IE8 is not a bad browser, and most mainstream users who are still using IE7 will feel right at home. The problem for Microsoft, however, is that a lot of users have already moved to other browsers like Firefox, Safari, Opera, and Chrome, and IE8 doesn't really offer these users anything new or innovative. Of course, IE7 is the world's most often used browser, so this upgrade, as Om Malik rightly points out, will indeed be a welcome upgrade for millions of Windows users, and might just stop a lot of them from looking for alternatives in the near term. If you are already using another browser, however, IE8 will just look like more of the same and we can't really see a compelling reason for why you would want to switch back to Microsoft's Internet Explorer.

]]> Discuss]]>
http://www.readwriteweb.com/archives/internet_explorer_8_has_arrived_1.php http://www.readwriteweb.com/archives/internet_explorer_8_has_arrived_1.php Browsers Thu, 19 Mar 2009 09:04:48 -0800 Frederic Lardinois
Microsoft Releases Internet Explorer 8 RC1: Promises Faster and Safer Browsing ie8_logo_jan09.jpgMicrosoft today announced the first (and probably only) release candidate of Internet Explorer 8. In terms of its look and feel, IE8 feels a lot like IE7, though Microsoft has made a lot of changes under the hood. IE8 features a new rendering engine, support for CSS 2.1, and a 'smart address bar' that is very similar to Firefox's 'awesome bar.' IE8 has also taken a page from Chrome's playbook and now opens a separate process for every tab. This means that IE8 won't crash outright just because of problems with one tab.

]]> IE8 is a major update of Microsoft's venerable browser. We won't be able to discuss all the new features, but you can refer to our previous coverage of IE8 and Microsoft's press release for more details. Assuming Microsoft doesn't find any major bugs in this release, IE8 RC1 should be identical with the final product. If you want to give it a try, you can download it from here. Of course, IE8 will only be available for Windows, but it is noteworthy that today's RC1 won't install on Windows 7.

Compatibility

ie8_accelerator.pngOlder preview releases of IE8 already featured a compatibility view, but this release candidate takes a slightly different approach. Instead of having to switch to the compatibility mode yourself after something goes wrong, IE8 will do so automatically, based on a built-in list of sites that are already known to be incompatible with IE8.

While the IE8 team proudly points out that the browser aces the ACID2 test, it should be noted that it doesn't pass the ACID3 test.

Security

Maybe the most important advancement in IE8 is its built-in clickjacking prevention. Content providers can now add a tag to their pages and explicitly disallow their content from being shown in a frame.

Microsoft has also updated the InPrivate Browsing and Filtering modes.

Speed

ie8_safe_browsing.pngIn terms of speed, Microsoft decided not to follow the lead of the other major browsers, which are mostly focusing their energies on building faster JavaScript rendering engines. Instead, Microsoft's browser team argues that JavaScript is only responsible for 20% of the page load time on the 25 most popular sites online. So instead of speeding up the JavaScript engine, Microsoft optimized IE8 for these 25 popular pages.

Early Verdict

In our tests of the earlier betas and this release candidate, IE8 proved itself to be a perfectly capable browser, and new features like web slices and accelerators are quite useful and work surprisingly well. For mainstream users who are still using IE7 (or even IE6), IE8 is a major upgrade, but because Firefox has a far more interesting lineup of addons and extensions than IE, most advanced users probably won't even bother to install it. IE8 is definitely an important milestone in the development of Microsoft's Internet Explorer, but a lot of the 'new' features are already available for Firefox, Chrome, and Opera.

]]> Discuss]]>
http://www.readwriteweb.com/archives/microsoft_releases_internet_explorer8_rc1.php http://www.readwriteweb.com/archives/microsoft_releases_internet_explorer8_rc1.php News Mon, 26 Jan 2009 13:14:34 -0800 Frederic Lardinois
Google Releases Browser Security Handbook lock_dec_08.jpgJust before announcing that Chrome was taken out of beta last week, Google released a browser security handbook for Web developers that details the key security features of the main Web browsers.

Released under a Creative Commons 3.0 license, the document provides a comprehensive comparison of security features of the commonly used browsers; IE (version 6 and 7), Firefox (version 2 and 3), Safari, Opera, Chrome and the lesser known Android embedded browser.

]]> Wanting to give the Web world a one-stop reference to security issues in browsers, author Michal Zalewski writes "Insufficient understanding of these often poorly-documented characteristics is a major contributing factor to the prevalence of several classes of security vulnerabilities."

Browser security has been an ongoing problem over the years and was the first subject discussed during the browser wars panel at the Add-on conference last week. Earlier this year, Robert Hansen and Jeremiah Grossman uncovered an attack known as clickjacking, which gives an attacker the ability to trick a user into clicking where the attacker wants on a site. A good overview can be found on the Computerworld site, which has a clickjacking FAQ:

"In plain English, clickjacking lets hackers and scammers hide malicious stuff under the cover of the content on a legitimate site. You know what happens when a carjacker takes a car? Well, clickjacking is like that, except that the click is the car."

Clickjacking is one of the issues covered in the security handbook which is divided into three sections:

  1. Basic concepts behind Web browsers with reviews of core standards and technologies behind current browsers and their security properties
  2. Standard browser security features details explicit security mechanisms and restrictions
  3. Experimental and legacy security mechanisms discusses security mechanisms that have either fallen into disuse or never caught on, as well as those yet to prove their worth.

The document appears to be an ongoing project; you can find more details here.

Image Credit: Thanks Darwin Bell

]]> Discuss]]>
http://www.readwriteweb.com/archives/google_releases_browser_securi.php http://www.readwriteweb.com/archives/google_releases_browser_securi.php Google Sat, 13 Dec 2008 12:11:12 -0800 Lidija Davis