The newly released Google Chrome has several issues which I believe makes it unusable.
Chrome claims better security than other browsers as each tab acts as a “jail”. Unfortunately, it’s very easy for a malicious website to download files onto your desktop or your download directory.
The “carpet-bombing” security issue
It takes nothing more than the following line of code:
Google Chrome then downloads RandomFile.exe into your downloads directory without any user prompt. For many people, the download directory is the Desktop. Being an executable file, it can have its own icon. So potentially, visiting a website through Google Chrome could lead to malicious executable files appearing on your desktop, which may disguise themselves as utilities such as browsers. Not only that, it takes just one click on an icon to launch it from Chrome without any warnings.
Privacy Issue with the Omni-Bar
The address bar (Omni-bar) has built in Google Suggest. This means anything you type into the address bar, including partial URLS, are sent to Google’s servers. Not only that, requests from the Omnibar send your Google cookies. That is, Google can link every single thing (URLs and searches) you type in the address bar back to your Google account and hence your personal identity.
The Coderrr Blog has some examples of requests sent to Google’s servers. It’s pretty scary.
It’s worth mentioning Firefox 3 and Google Toolbar’s auto-suggest features will do the same thing. However, they will only send search queries whereas Chrome sends URLs too. The Electronic Frontier Foundation are worried.
You can crash Google Chrome by typing :% in the address bar. Don’t ask me why, I have no idea. Interestingly enough, Google Chrome has already crashed several times in the short amount of time I’ve had it. Firefox hasn’t crashed in a long while.
Google Chrome is a new product and so I don’t think we should be too harsh on it. But what’s true is that there are siginificant security, privacy and technical issues with Google Chrome as it stands at the moment. I feel it’s partially irresponsible of Google to be promoting Chrome to end users on their Google homepages when the latest release of Chrome has so many issues.
What’s more, the browser was initially released with a clause in the EULA which granted it “a perpetual, irrevocable, worldwide, royalty-free, and non-exclusive license to reproduce, adapt, modify, translate, publish, publicly perform, publicly display and distribute any Content which you submit, post or display on or through” the browser. It’s been removed now.
Recommendation: Stick with Firefox for the time being.