• Currently, IE (=Internet Explorer) is the most popular Internet browser. As such, malicious hackers made it their number one target and set out to exploit its flaws. It also has the disadvantage of relying on ActiveX technology, which allows web sites to run executable programs on your PC via your browser. Although there is an improvement in security in IE7 and IE8 compared to older versions, this technology is still vulnerable.

    In order to improve security you may choose to use a less popular browser such as,
    Mozilla’s Firefox or Google Chrome.

    Both Firefox and Chrome use a different technology from Internet explorer. They both built on open source code from other platforms. Chrome browser is based on the open-source Webkit engine, which is an open-source web browser layout engine developed by the WebKit Foundation. Firefox is based on the open source Gecko engine, which is a layout engine currently developed by Mozilla Corporation.

    For now the most popular alternative to Internet explorer is Firefox. I have a lot of respect to Mozilla and the open source community, but when I have tried to use Firefox 3.5 I had a frustrating experience. It has kept crashing down on me, crashing my PC along with it.

    As result of this experience I have decided to give Google Chrome a chance.
    Google Company has stated in many occasions that Chrome browser has innovative security features.

    When investigating these announcements I have noticed four major security features in Google chrome.

    1. Safe browsing software (it is also being used by Firefox browser) – Safe browsing features protect users against phishing and malware attacks. It uses a blacklist approach that gets downloaded to the user’s PC on a regular basis. How does it work? Well Google is constantly crawling the web, finding new and changed websites. During this crawling if they encounter a suspicious site that seems to be a phishing site (designed to steal personal information of unsuspecting users), it is being added to a list of suspected phishing websites. If a site contains hints to potentially malicious activity, Google tracks this site for a while and if a clear evidence of malicious activity is discovered, such as, computer viruses being downloaded and installed, it is being added to a list of suspected malware-infected websites.
      If you use Chrome browser and you have safe browsing mode enable,
      then Google Chrome will contact servers at Google, approximately every half hour, to download updated lists of suspected phishing and malware websites. These lists are being stored on your PC so when you surf the Web each site you browse to is being checked against these black lists locally (This is designed to offer performance). If the requested site is in the black list a warning message will appear stating that the requested site is suspected to be a phishing site or a malicious site and the user can choose to go back to safety.
      This feature seems to help the fight against malware and phishing, but there is a disadvantage. A few bloggers have raise questions about privacy implications. Bloggers have notice that every few hours when an update of the black lists is being done, two parameters are being sent to Google servers – “machineid” and “userid” – both computed information based on machine/user information. This information is sent along with a bunch of other browser information to ask Google if they should download an update. This information can be used for tracking. Google is of course obligated to privacy agreement with Internet users stating it will not use any of the personal information being collected, but would this obligation stand against a court order? I really don’t know. In short, safe browsing seems like a great security feature fighting phishing and malware attacks, but users who are passionate regarding their privacy should think twice before using it.
    2. A privacy mode (Incognito) – this feature manages privacy settings and designed to suit users who use public computers, or otherwise wish to keep their browsing habits confidential. When enabled (Click the wrench menu -> Select New incognito window menu item) Chrome browser will not remember visited pages, form and search bar entries, passwords, download List entries, cookies and cached files.
      You can still create bookmarks, and these will be retained when exiting incognito window.
      A similar feature exists also in Internet Explorer 8 browser and Firefox 3.5 browser. These features probably make live easier for Internet users who want to keep their surfing habits to themselves, but in the same way it helps the adults in the group it also may allow children to surf unsupervised. Internet savvy kids can easily hide their Internet activities from their parents. So it is very important for parents to understand that monitoring of their children Internet activities by viewing the browser history on the child’s PC might not work.
    3. Clear Browsing Data – There is a feature in Google chrome which allow the user to clear browsing data, such as, browsing history, downloads history, cache, cookies, saved passwords and saved form data (Click the Wrench menu -> select Clear browsing data -> Select the checkboxes for the types of information you wish to remove). This feature allows you to keep your browsing habits to yourself even if you are not using the Incognito window. Parents should be aware that similar to the Incognito mode their kids can use this feature to delete their browsing history so parents should not rely on browsing history as something that can help them get involved in their children Internet activities.
    4. Sandbox security mechanism – This feature, as I see it, is the most significant one. A sandbox is a security mechanism used to run an application in a restricted environment. Browsers are dealing with malicious attacks on a regular basis. The most popular vectors for browser attacks are HTML Rendering and JavaScript execution. The sandbox security mechanism is designed to protect the user’s PC and files against these kinds of malicious attacks. If there is an attack that exploits the browser vulnerabilities and an arbitrary code is being executed on the machine, it will be executed in an isolated environment and the user’s PC will not be harmed. This security mechanism will also prevent access to the user’s files. The sandbox mechanism itself is not a new security model; It uses the security features of Windows extensively. You should be aware that since the sandbox mechanism relies on Windows to achieve its security, it is impossible for it to protect against a flaw in the OS security model itself.

    In a nutshell, these four security features seem to be helpful and contributing to a safe Internet experience, but I am not seeing any innovative new security models here. Three of these features – Safe browsing software, privacy mode and Clear Browsing Data, already exist in IE8 and Firefox 3.5, and the sandbox security mechanism can be added to IE8 and Firefox by plugin/addon.
    I think the greatest advantage of Google Chrome is that currently it is not targeted as much by malicious individuals, as IE and Firefox are. Additional advantage is in the usability factor which seems to be in my opinion better than IE or Firefox, but I think this issue is a matter of taste…
    For now, if you are looking for a less targeted browser, Google chrome seems to be a good alternative.

    Tags: , , , , , , , , ,

  • The Internet has become an important tool in our everyday lives. Surfing the Web has become second nature for our children.
    In the same way we put boundaries for our children in the real world, we should also do so in the virtual world.
    There are different types of Internet parental control software that were created to enable parents to manage and control their children Internet use. It is important for parents to understand that no matter how efficient the software is, it can not replace educational efforts and open communication in the family.
    Internet parental control software can be efficient when it is combined with parental guidance for safe Web surfing and Web ethics.

    If you decide to use a parental control software you can start with Content Advisor which is a basic tool included free in Windows for IE6 or later versions.

    1. Make sure you have IE6 (=Internet explorer 6) or later versions installed.
      Open an Internet Explorer new window. In the Help menu click About Internet Explorer. If the version number is 6.xxx or later then it is OK. If not, you should download and install a later version of Internet Explorer – IE6 or later. To do that click that link – Internet Explorer. The following steps are relevant for IE7 version.
    2. In the menu bar click Tools and then click menu item Internet Options.
    3. Choose the Content tab and click on the Enable button.

      content advisor enable screen

    4. In the Ratings tab select filter settings for the categories shown.
      When the slider is on the left side of the bar the restriction is the highest.
      For each change of rating click the Apply button. When done click OK button.
      Rating tab screen
    5. You are prompted to define a password that will be used in all future changes performed in the settings of the Content Advisor.
      password screen
      The Content Advisor is now active.
    6. After defining the password click on the Approved Sites tab. In the Allow This Web site text box type in the URLs of websites (one by one) you wish to treat specially. Choose the relevant button on the side of the text box. If you want this website not to be viewed click Never button. If you want this website to be viewed click Always button. When you are done click OK. You can edit this list at any time.
      Approved sites screen
    7. If you want to change the password of the Content Advisor or other general settings you can do so in the General tab.
    8. If you want to disable the Content Advisor, open Tools menu and click menu item Internet Options.
      Choose the Content tab and click on the Disable button. You are prompted to enter the password of the Content Advisor. Enter your password. The Content Advisor is now disabled.
      content advisor disable screen

    Be aware that the content restrictions exist only in Internet Explorer browsers. If you have another Internet browser, such as, FireFox or Google Chrome, installed on your computer your child will be able to surf using these browsers without limitations.

    Internet savvy kids may install alternative browsers on their PC once they discover you have limited their surfing options.

    To prevent such actions create an additional user on the child’s PC with limited permissions – no permissions to install new programs on the PC. Make sure you only have Internet Explorer installed on the PC and give your child access only to this limited user.

    Remember that whatever you do there are children who are smart enough to overcome it if they really want to. Invest time in education and guidance for safe Web surfing and Web ethics. Remind your children what are the threats that exist on the web. Teach them how to protect themselves.

    For more information on Internet parental control software see – Internet Parental Control Software

    Tags: , , , , , , ,