Risk
12/15/2010
01:25 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Google Chrome Gets Ready For Business

The introduction of new Google tools for IT administrators is intended to encourage enterprises to give Chrome, and perhaps Chrome OS, a try.

Google Chrome OS Promises Computing Without Pain
(click image for larger view)
Slideshow: Google Chrome OS Promises Computing Without Pain

With the launch of the Chrome OS pilot program last week, it's clear that Google believes businesses and other organizations appreciate the value proposition of its new nascent Web-centric operating system: speed, simplicity, and security, at a low price point, with minimal maintenance.

On Wednesday, Google moved to sweeten the deal with the introduction of a few tools to simplify Chrome browser installation and management in the enterprise. The company has created an MSI installer to allow businesses to use common deployment tools to install Chrome for their users.

Google has also added support for managed group policy through a set of policies and templates that provide administrators with security and privacy configuration options. And it has extended group policy support to Google Chrome Frame, a plug-in for Internet Explorer that hands Web page rendering off to Chrome's engine without sacrificing the functionality of Web sites and applications that require Internet Explorer.

In a blog post, Google product manager Glenn Wilson and software engineer Daniel Clifford suggest that these tools will help IT administrators who are considering Chrome OS to test Chrome's compatibility with important Web applications.

"By deploying Google Chrome, organizations can take advantage of improved security and Web application performance without needing to upgrade other expensive software licenses or buy new hardware," wrote Wilson and Clifford. "Deploying Google Chrome also gives users access to productivity-enhancing HTML5 Web applications."

Google Apps for Business customers seeking to pilot test Chrome have access to phone and e-mail support. Organizations not using Google Apps for Business can help themselves using instructions for IT administrators that Google has provided. Before diving in, be sure to check out the Chrome enterprise bug list, which describes outstanding issues that may be relevant to the needs of your organization.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9676
Published: 2015-02-27
The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.

CVE-2014-9682
Published: 2015-02-27
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.

CVE-2015-0655
Published: 2015-02-27
Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.

CVE-2015-0884
Published: 2015-02-27
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

CVE-2015-0885
Published: 2015-02-27
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.