‘Secure’ browser more vulnerable than expected, says Google

It's no surprise that with recent scares surrounding malware in email, computer users would be interested in a secure alternative to the standard browsers. However, companies need to be thorough when researching the browser they want for a company default: some of the solutions claiming to be safer than the big names like Firefox or Chrome could turn out to be just as prone to hijacking.

Chrome recently commented on an offshoot browser called Aviator that has purported to be good for privacy but has been found to contain some bugs. Aviator was developed by WhiteHat Security using Chrome's code and offered as an open source option capable of protecting sensitive information, using the latest updates.

Although he commended WhiteHat for trying, Google's Justin Schuh said in a post on the Chromium blog that Aviator is technically inferior to the security options already present in Chrome. He also said that many of the changes WhiteHat have made to their browser were merely "superficial."

"It's critical to get the basics right, like following secure coding practices, tracking stable branches for security fixes, and keeping local changes minimally invasive to simplify the maintenance burden," he said.

This is just one of several browsers to have emerged with security as a key selling point: others include the Windows-based Comodo Dragon, another browser derived from Chrome's code, and a Firefox-friendly option simply called Dell Kace Secure Browser.

Enterprises might benefit by adopting a more obscure security browser if it truly improves overall threat sensitivity and protection. Just as important as finding a strong browser, though, is a way of accessing important applications consistently. Companies that take a custom approach to browsing have to make sure the same security works consistently with all applications. A portal integration strategy is a critical part of this process.