Google: Chrome now protects you from Spectre password-stealing attacks

Google: Chrome now protects you from Spectre password-stealing attacks

To check whether this is enabled, or disable it should you choose (which we don't recommend), you can head to chrome://flags#enable-site-per-process in your location bar, and then set the toggle for Strict Site Isolation to either Enabled or Disabled.

All this sounds good, but it comes at a cost. With Chrome 67, Google added a feature called site isolation that "improves security and helps mitigate the risks posed by Spectre", and it is now enabled by default across Windows, Mac, Linux, and Chrome OS. It has held back one percent to monitor performance.

Google is investigating how to extend Site Isolation coverage to Chrome for Android, where there are additional known issues.

The mitigation is an impressive engineering feat that's created to lessen the damage of attacks that exploit a new class of vulnerability that came to light in January. A website could use such attacks to steal data or login information from other websites that are open in the browser.

In other words, on Windows, macOS, Linux, and Chrome OS devices, Chrome uses the security boundaries provided by the operating system to ringfence each domain into its own browser process.

Google's Chrome browser may be popular, but you'll find a lot of its users complain about high memory usage. Thus, https://google.co.uk would be a site, and subdomains like https://maps.google.co.uk would stay in the same process.

Enterprise users may use policies to enable Site Isolation starting in Chrome 68 for Android, and there is also a manual option to turn the feature on right now. A given tab could even switch processes when navigating to a new site in some cases.

With Site Isolation, a single page may now be split across multiple renderer processes, preventing bad sites from snooping on legit ones. This would allow a successful Spectre attack to read data (e.g., cookies, passwords, etc.) belonging to other frames or pop-ups in its process.

As long as you see the subframe processes, Site Isolation is enabled on your system.

"This means all navigations to cross-site documents cause a tab to switch processes".

This also means that all iframes on a page (generally for ads) are put into a separate process than the parent frame, further increasing memory usage, but increasing security at the same time.

Google said it's been working on this for several years, independently of Spectre, so the inclusion of Site Isolation was inevitable. You might need to consider using a tab manager extension. This would normally fail to render and not expose the data to the page, but that data would still end up inside the renderer process where a Spectre attack might access it.

Tip: Firefox supports a similar feature called First-Party Isolation.

Related News:

  • Oppo Find X all set to launch in India today

    Oppo Find X all set to launch in India today

    Interestingly, there is no fingerprint scanner and the phone relies on the front camera as a biometric tool to unlock the phone. The display screen sports 93.8 per cent screen-to-body ratio which is protected by Corning Gorilla Glass 5 protection.
    Mercedes-AMG working on Cayman rivaling sports vehicle

    Mercedes-AMG working on Cayman rivaling sports vehicle

    A mid-engine layout is now in the discussion, but AMG also hasn't ruled out a more conventional front-engine layout. Further solidifying the new Mercedes-AMG car's status as a challenger to the 718 Cayman is its proposed design.
    Emmanuel Macron rubbishes Donald Trump's increased North Atlantic Treaty Organisation  spending claim

    Emmanuel Macron rubbishes Donald Trump's increased North Atlantic Treaty Organisation spending claim

    At NATO, Trump did not specify which countries had committed to what, and it remained unclear whether any had changed their plans. Trump tweets: "Why are their (sic) only 5 out of 29 countries that have met their commitment? ".
  • Once criminality of Section 377 goes, so will stigma against LGBTQ

    Once criminality of Section 377 goes, so will stigma against LGBTQ

    One of the observations made by the top court said , " Section 377 is the infrastructure for denying rights". "The members of the community feel inhibited to go for medical aid due to prejudices against them".
    Bank of Canada raises rate, predicts economic resilience despite trade risks

    Bank of Canada raises rate, predicts economic resilience despite trade risks

    The Bank said Canada's economy is operating "close to capacity", implying that it expects to see inflation rise in the future. Business loans, student loans, lines of credit and home equity lines of credit will cost more to service.
    Samsung Galaxy Note9's price and release date revealed

    Samsung Galaxy Note9's price and release date revealed

    Now it seems that the "gold" Samsung Galaxy Note 9 is not gold or yellow at all - just the all-new S Pen that goes with it. According to the media, the information comes from a Samsung employee who attended a pre-briefing for the device.
  • Emily Ratajkowski debuts massive engagement ring

    Emily Ratajkowski debuts massive engagement ring

    She also revealed a few details about the ring, including the fact that the couple had designed it together. In two photos posted on her Instagram account, you can see the double diamond ring on full display.
    Kylie Jenner's Forbes Cover Calling Her A 'Self-Made' Billionaire Receives Backlash

    Kylie Jenner's Forbes Cover Calling Her A 'Self-Made' Billionaire Receives Backlash

    Even Dictionary.com roasted the magazine for the title, Tweeting yesterday "Self-made means having succeeded in life unaided". Netizens are pointing out the fact that Jenner shouldn't be called "self-made" as she was born into an already rich family.
    Assad forces set to take city where war began

    Assad forces set to take city where war began

    With critical help from Russian Federation and Iran, Assad has now recovered most of Syria. The attack resulted in deaths among the Syrian army, it said, without providing figures.
  • Trump praises Merkel at summit hours after he ripped Germany

    Trump praises Merkel at summit hours after he ripped Germany

    Before departing for England on Thursday, Trump signed a joint declaration that reaffirmed America's role in the alliance. The UK announced on Wednesday, July 11, 2018, that it would almost double the number of troops it deploys to Afghanistan.
    Nadal braced for 'complex' Djokovic in 52nd meeting

    Nadal braced for 'complex' Djokovic in 52nd meeting

    Incidently, the Nadal versus Del Potro match lasted exactly the same length as Rafa's win against Roger Federer in the 2008 final. Victory secured, Nadal climbed over the net and ran over to the baseline to help the distraught Del Potro back to his feet.

    John Legend closes in on EGOT with Emmy nomination

    With the announcement of the 2018 Emmy Award nominees, one star has a lot more at stake than the slew of other contenders. This marks the first time Legend has been nominated for the small screen's biggest award.


Most liked

Microsoft takes on Slack with free version of Teams
Upgrading to the paid version also gives you more storage, enterprise security and compliance, and an unlimited number of users. Integrated, real-time content creation with Office Online apps, including built-in Word, Excel, PowerPoint, and OneNote.

Mission: Impossible Fallout Movie Review - A Top-Notch Entry in an All-Timer Franchise
Mission Impossible Fallout is releasing on July 27 but there were a few lucky ones, who managed to watch it many days before. Now what we gathered from the trailer is, Tom Cruise or Ethan Hunt is not so kicked to have Henry Cavill on his side.

Extinction: Trailer for Netflix Sci-fi Thriller
Netflix just released the official trailer for their upcoming sci-fi film, Extinction . Joining Peña are Lizzy Caplan ( Masters of Sex ) and Mike Colter ( Luke Cage ).

Sacha Baron Cohen Continues to Troll Sarah Palin
Palin says she sat through what she called a long interview full of "Hollywoodism's disrespect and sarcasm" before she walked out. Walsh, who has strong pro-Israel views, said he was invited to a dinner for defenders of Israel and asked to film an interview.

'We are not heroes', says United Kingdom diver involved in Thai cave rescue
Although parents of the first eight boys rescued were able to see their sons, they had to stand six feet away from the children. Jessada also said a psychiatrist was attending to the boys, who are sleeping well and are not showing symptoms of stress.

Monster Hunter Gets Animated Special Airing in 2019
After growing rather large holding the crystal, the monster holds it while attacking the Hunter. Monster Hunter: Legends of the Guild is due out in 2019.

Windows 10 April 2018 Update Gets Cumulative Update
Addresses an issue that causes the mouse to stop working after a user switches between local and remote sessions. These new feature will be rolled out to all Windows 10 users as part of the Redstone 5 update later this year.

Bentley to celebrate centenary with Mulsanne homage to brand founder
Edition will make its debut at the Pebble Beach Concours d'Elegance in late August and customer deliveries will begin in 2019. The vehicle also comes with Onyx paintwork, although customers can select other colours from Bentley's colour pallet.

Sony Xperia XA2 Plus brings high-res audio to the mid-range
Based on Android Oreo, it runs the Qualcomm Snapdragon 630 processor, which is backed by 4GB/6GB RAM. Though the post did not reveal the price, Xperia XA2 Plus is expected to be a mid-range smartphone .

Surface Go shipping August 2 with top-spec device priced at $549
In terms of connectivity, the device supports WiFi connectivity (802.11 a/b/g/n/a) and an LTE-compatible version is in the works. There's also a Surface Pen for $99 that artists and students can purchase for doodling and note-taking purposes.

Aston Martin Resurrects Cygnet Concept With A V8 Engine
This means that in certain circumstances, the Cygnet's owner could even enter it in FIA-approved motorsport, if they so desired. Aston Martin Cygnet is probably the company's most forgotten vehicle of all time.

Apple updates MacBook Pro with faster performance and new features for pros
According to Apple , the 15-inch model is up to 70% faster and the 13-inch model two times faster than earlier models. There's also a revamped "third generation" keyboard that promises to be quieter and (hopefully) not a fragile.

Dancing FBI agent, accused in backflip gunfire incident, can carry weapon again
Denver District Attorney's Office spokesman Ken Lane said toxicology tests on Bishop "do not support further charges". The video then shows the agent putting the gun back into a waistband holster and walking away with his hands up.

Puerto Rican T-shirt video controversy results in officer's resignation
President Woodrow Wilson in 1917 signed into law the Jones-Shafroth Act, granting US citizenship to residents of Puerto Rico. The intoxicated individual involved in the incident was arrested and charged with assault and disorderly conduct.

USA warns of Nord Stream 2 sanctions risk
Five Western firms have invested in Nord Stream 2 - Wintershall and Uniper of Germany, Austria's OMV, Anglo-Dutch supermajor Shell, and France's Engie.