- A Microsoft Dev has submitted an update to Chrom
- Update DE-LEVER CHROME, TO RUN WITHOUT ADMIN PRIVELOOS
- This should prevent malicious additions and extensions in operating freely
Future versions of Chrome on Windows are likely to not run with admin privileges by default. In this way, users must be better protected from suspicious extensions, risky sites and other potentially malicious activities.
Earlier in May, a most important software engineer at Microsoft, Stefan Smolen, submitted an obligation to the chrome source code, which Chrome will automatically remove when users try to launch it with increased permits.
“This CL is based on changes we have had in Edge, about 2019, which is trying to automatically reject the browser when it is run with the elevated part of a split / attached token,” the Smol said in the commitment. “This automatically tries a relaunch once, and then if it still fails, it falls back to the current behavior (which is trying to launch the administrator).”
Securing chrome
The feature has been present at the edge since 2019. When users launched Edge with elevated permissions, the browser would show a warning and a recommendation to relaunch it without admin privileges.
“We are adding a command line contact to prevent Auto-Relaunch if, for whatever reason, we are again launching to admin mode,” the obligation reads further. “We don’t turn off chrome when it runs in automation mode so we don’t interfere with automation tools.” This feature also prevents potential endless loops.
As a window to the wider internet, the web browser is one of the most frequently targeted programs. It constantly does not handle – stated data from countless sources, which is why cyber criminals are always looking for vulnerabilities – either in the code, in plugins or on poorly secured sites. Compromise with a browser can give threat players access to sensitive information, including login -credentials, personal data and more.
By removing admin privileges from the browser, Microsoft disarms it and prevents threat actors from running malware or stealing personally identifiable information. Therefore, the Redmond giant advises all users not to launch their browsers with administrator privileges.
Via Bleeping computer
