I'm curious: is Edge actually more secure than Chrome?
Certainly with Chrome I've noticed a large number of malicious sites don't trigger any warnings from Chrome at all, so Chrome certainly has a lot more work to do.
At least going by the recent Pwn2Own competitions, the answer seems to be no. We'll see how they fare at the next ones.
The AppGuard virtualization thing or whatever they are calling it better come as an API for other apps soon as well, and I hope Microsoft won't just keep it for its own products. I could see serious anti-competitive issues with that (important OS feature being kept from competitors so Microsoft can aid its own products).
I also don't understand why they are making that feature part of "Windows Defender". It doesn't make any sense to do that, except for "brand unification". I think it should be kept separate.
AppGuard is interesting, but it's kind of "cheating". That's not to say it's a bad thing, better security is a win, but it might come with some significant downsides to battery and performance, and most likely will not be a "general purpose" security mechanism for the masses (at least right now they are only showing it off as something a corporate network admin can enable for some sites).
Then again, this is all speculation. They could prove me horribly wrong and wipe the damn floor with the competition!
This is semi-humorous and semi-serious. If so few users actually use edge then hackers won't bother trying to target it. I suspect that most people use Chrome over Edge, and the use of Edge is very small. Could this be true?
uBlock is designed to block ads. People like me won't use uBlock, because blocking ads is for jerks. (Go ahead, downvote it. It won't change my mind. Ad blocking destroys the open web, by putting content producers out of business. If you think it's just about obtrusive ads, check out Troy Hunt's recent experience: https://www.troyhunt.com/ad-blockers-are-part-of-the-problem...)
Privacy Badger's goal is to block tracking cookies and similar tools. Ads can, by obeying "do not track" instructions and similar, avoid being blocked by Privacy Badger, and so while some ads do end up getting caught in Privacy Badger, many do not. Privacy Badger is about protecting your privacy, not preventing advertising.
Note that I've contacted the EFF regarding Privacy Badger on Edge, and they said they were working on it.
Mostly that people have, for years, default-assumed Google was a public good, and Microsoft was an inherent evil. It's really not different at all, each company is utilizing their most prevalent platform to push their other product.
FTA: "We’re already used to Google’s search engine pushing Chrome, Yahoo linking to Firefox, and Bing recommending Edge. This year, Microsoft has upped the ante in the browser war with Windows 10."
One could make the argument that making the push from the OS is a different level than from the website.
I think it's a poor argument. The difference between OS, application, and web-level content is blurring more and more each year. We have web apps built into OSes, OSes built on top of web browsers, etc.
There's less of a lock-in effect though. The only thing stopping you from using a different search engine is that you're more comfortable with Google, it provides better (catered to you) results, etc.. That is, competitive advantage.
When people leave Google Search (and they will, nothing lasts forever), they'll leave fast.
That may be true of Google search, but Gmail? Or Google Accou ts, for that matter? Almost certainly not. It's far easier to switch from Windows to a Mac or Chromebooks or even Linux than it is to switch from Google and its associated services.
Further, because of mobile, there are significantly greater number of Google users than there are Windows users.
I guess I am annoyed because as someone who uses Firefox as their primary browser, it always frustrated me that there was t more outrage at Google pushing people away from Firefox. But the moment MS started doing it, it became an outrage.
The account would be by far the hardest thing for me to walk away from. Email is federated and I can export the mail out of Gmail without too much hassle. I don't because I like the interface they provide (for now). Calendar, same deal. I'm there for the convenience, not because another calendar application wouldn't work for me.
Accounts would be the hard part because that's my phone login, and there's no standard account service I could migrate to that would give me a functional replacement.
The real thing keeping me on the Google platform is the convenience of having these things tied together. But that's not exactly a strong lock for me. I can and do hop services while sacrificing convenience. This might be a stronger hold on others but it's still not Microsoft's you-can't-do-work-in-any-organization level of hold between Office, Windows, Exchange, etc..
Google has lock in, it's just less obvious. Other search engines might not be as good because they don't have access to my search history* and email data for instance.
* This has actually been annoying for me lately. The results favor the things I've already clicked on which is often exactly not what I'm after.
Have you tried these search engines? These are proxy to Google's or other's results. You will not feel lock in with this for sure because it is bare bone.
I'm not saying there's no lock-in, just that it's not as rigid or strong. Better search results (for you) is exactly the kind of reason you want to be using one search engine over another. If another search engine started providing better results, you'd be able to swap, and the only effect would be the psychological disorientation from the change interface (I struggle to use DuckDuckGo because my eyes scan the wrong part of the screen while trying to take in the results).
In the example you mentioned, I think that there actually is a difference.
1) You use Firefox, and Microsoft tells you that you should use IE instead.
2) You use Google Search, and Google tells you that you should use Google Search more often.
The first is similar to Google somehow placing notes in Bing Search that Google search is better, the second is similar to Microsoft telling IE users that IE is better than Firefox in [this metric].
I think 1) is ethically more questionable than 2).
"Google works better with Chrome" is the same as any other page's "this site designed for Netscape Navigator" button, a perfectly acceptable practice for the last couple decades. Your operating system popping up a warning that "Microsoft Edge is safer than Firefox" is an entirely different ballgame.
You can just disable Google Now in the Google settings, and install a different launcher like Nova Launcher, if you want to get rid of Google Now entirely. Modding your phone is not necessary for this.
Every single time I login into Gmail with Edge I am presented with a banner to switch to Chrome. I dismiss it, next time it's still there. I've seen this banner many many times. You would think that eventually they would give up.
If I login with Firefox, no such banner (I think because it would cause an uproar within the dev comunity).
The psychological burden of having to mentally validate my choice of browser every time I used Google was a factor made me switch away from Google, so maybe they've stoppped doing it now?
Sadly the only choice for that is the LTSB edition, not eligible for end-user purchase. Personally I justified its install with my machine being eligible for free 10 update and ending with less features (which I don't need). It receives a cumulative security update once per month and no junk.
> Disabling automatic updates isn't really a viable solution, and I will convey downvotes to people who advocate it.
As they switch to a cumulative update model, will you wildly down-vote people who think that breaking their system with 1 update out of 10 is somehow reasonable ? Or that excluding that update but installing others would make more sense, then:
a) leaving everything out for that month,
b) having an unusable system.
Morons like you who accept and even enforce this kind of "my way of the highway" attitude to the others are the reason MS can get away with it.
I find cumulative updates irritating, and I've complained about it loudly to anyone who will listen. Disabling automatic updates is STILL not a viable solution.
There is an option to defer upgrade in Windows 10 Pro.
> Some Windows 10 editions let you defer upgrades to your PC. When you defer upgrades, new Windows features won’t be downloaded or installed for several months. Deferring upgrades doesn’t affect security updates. Note that deferring upgrades will prevent you from getting the latest Windows features as soon as they’re available.
So because Google sucks, that makes it okay for Microsoft to suck too? And because billions are at stake for these companies, it's somehow okay to screw over the public?
Few months ago I installed Windows 10 and decided to try Edge. Here's how Google responded to that:
1) Every time I went to google.com, I was presented with a notice that I should install Chrome and that I should set Google.com as my search engine
2) Google sent an email to my Gmail account telling me that I should install Chrome and use it instead.
3) Every time I went on Youtube.com, I was again pestered with notices that I should install Chrome.
And if you're a Firefox user, you've probably noticed "set your search engine to Google" every time you search on their site. But being an Edge user is 10x worse.
Google is THE WORST offender when it comes to pushing their own services.
You could make the point that this is standard industry behavior, and Microsoft deciding to market their browser this way isn't anything new or noteworthy.
The hypocrisy comes from the broader 'internet enthusiast' groupthink that says anything Edge or IE must be worse and that MS is horrible for doing this, but in the same breath they give far less criticism to Google for doing this with Chrome.
Whether you agree with that view or not, it's understandable that the OP feels there's an element of hypocrisy not from Google but from the internet community as to how they view these companies' efforts to spruik their products.
It's fun. I remember times, when Google Chrome was in beta and it was just a little more than webkit frame with tabs. Only distinguishing thing was speed, better security model and nice look. So I switched from Firefox to Chrome, because I didn't really need all that power. So now Edge has the same impression.
Actually I'm not sure if Google Chrome will stay leading browser for much more. I already use Safari instead of Chrome, because it's enough for my needs. If Edge would be good enough, why install Chrome?
I have found that, while I do encounter the occasional bug on Edge, the battery life / ram improvements more than make up for it on my windows environment, compared to ff/chrome. (If you're plugged in all day, or have 32 gb ram, then not likely a difference maker, but I have two 8gb laptops that combined get >12 battery hours of use / day so it makes a measurable difference).
I don't think you know what hypocrisy means. You're going to Google properties proactively. A user shouldn't have to put up with this crap on an OS they purchased.
It's slightly different because Google has not had a court find that they abused their monopoly position to push their own browser and crush competition.
I am not suggesting that this current action violates the terms of Microsoft's settlement, only that there's relevant historical context here.
To be clear, I think both companies' whining is tacky and annoying.
Almost twenty years ago. And while Google hasn't yet been ruled against (outside of Russia), they're under investigation for "tying", the same anticompetitive practice Microsoft was found abusing, in almost every major first world nation.
And while Google bundles it's browser, like Microsoft did, it also bundles almost twenty applications now, which in most cases cannot be removed by the user.
So, yeah, twenty years ago, Microsoft did some bad things, but Google is doing much worse right now.
I agree that Google has not had a court find them an abusive monopolist, but I would add "yet." As someone who watched the Microsoft case start out in the tech press, then move to the mainstream press, and then finally become indictments the similarity to the process with Google is pretty interesting. If you follow the dollars, you can see how much money Google is paying for search traffic which squeezes out organic growth of competitors and were it not for Microsoft's warchest of cash probably would have killed off Bing before it became operationally profitable. And they use that search engine dominance to push the browser of their design which favors their products? That feels very much like Microsoft using their dominance in the OS space to push their browser which favored their products and technologies.
I have been using Windows since 3.1. I've never been this annoyed. Windows 10 caused data loss (don't even get me started), privacy issues, constant nagging about their products and too many hours spent trying to change defaults (only to see them being reset seemingly at random).
It's an amazing, stable and usable (except, you know...) operating system which for no logical reason, tries to alienate its users.
If this is greed on Microsoft's part, then I'm really sad to see such great engineering used to do such evil. If this is a popular operating system adapting to its average user, I'm extremely sad about this deep incompetence of the average user.
While windows 10 now cost money, there is no question that the pricing model of this OS is vastly different from previous iterations. The presence of telemetry without a clear way to turn it off on most versions is a privacy invasion sold under the guise of performance enhancement and used for the purpose of profit.
That's the unwanted or ignored outcome for their newest strategy.
MS shift is from developing and charging you $200 for greatly working operating system (and making this way $1B a year) to giving you the system practically free (hello Apple) and having you operate in one giant magnifying glass, where every move of your mouse and ever letter you type is send to MS to later digest and somewhat make decisions on what you want from life in terms of ability to advertise stuff back at you, whether from Bing that you use or in some way selling signals you send them to third parties so they serve you more "relevant" content making $1B plus a few more $Bs!
Conspiracy theory?? With fully working W10, from other than internet source load to your desktop photos of Ferraris, or simply name few photos "Ferrari". You will quickly see, within days how the ads being targeted to you on this computer are somewhat related to racing cars, luxury cars, etc.
I made up my mind already. Windows 7 with uninstalled telemetry crap is my last standing Windows. I just got new laptop and its got enough Windows 7 drivers to install clean copy. But moving forward I will have to be forced to go into Linux... at least glad my work doesn't require any sophisticated tools that work only on specific platform.
More and more typical tools work just about everywhere... I really appreciate Cordova and Electron in that regard, putting thoughts of bloat aside. Not much ties me to windows, and even .Net is more portable than ever.
And before you jump about the RCE, MSFT has a very broad definition for what counts as code execution, most importantly they count any browser systemic XSS as RCE while Google classifies it as an XSS, same goes with any type of memory corruption MSFT classifies it as RCE while Google classifies it as DOS unless there is a fully proven POC.
Most of these vulnerabilities were also reported by MSFT and unlike Google MSFT submits CVE's for it's internally disclosed vulnerabilities while Google doesn't.
I think the warning that Chrome is battery drain is pretty fair, because it's absolutely terrible. Edge is pretty secure but I don't feel using Chrome or Firefox is unsafe. I'm more afraid about my privacy using Chrome. But you shouldn't have Windows 10 telling users about how important their privacy is to Microsoft, or should it? ;)
The perception is probably one of ownership - e.g. you think you own the "machine" you're using (and, by extension, its OS) but not the web site you're consuming.
From that viewpoint, you don't expect websites to be acting in "your" best interest, necessarily, since they're not "yours" - but you do expect "your" machine to doso, or at least not actively act against it.
Given how the Web (especially Google's services!) is used for pretty much everything nowadays, I don't see any meaningful difference between an operating system that displays ads and a website that displays ads. Care to elucidate?
The difference here is that this might be actually "true" advertisement, Edge has atm better protection against social engineering attacks, and since MSFT moved to run it in an isolated VM which in effect acts as a sandbox it's also better protects the user against browser exploits.
I take issue primarily with the "safer" claim. Chrome employs the most security mitigations of any browser on the market.
An article from mid 2016 about grading software security like car security quantifies this nicely. Edge wasn't in the comparison, but I look forward to future research on that:
These claims by MS are not false. Recently MS has equipped Edge with hardware-based container. This is a plus point in comparison to any other browser out there.
94 comments
[ 2.7 ms ] story [ 156 ms ] threadCertainly with Chrome I've noticed a large number of malicious sites don't trigger any warnings from Chrome at all, so Chrome certainly has a lot more work to do.
The AppGuard virtualization thing or whatever they are calling it better come as an API for other apps soon as well, and I hope Microsoft won't just keep it for its own products. I could see serious anti-competitive issues with that (important OS feature being kept from competitors so Microsoft can aid its own products).
I also don't understand why they are making that feature part of "Windows Defender". It doesn't make any sense to do that, except for "brand unification". I think it should be kept separate.
Then again, this is all speculation. They could prove me horribly wrong and wipe the damn floor with the competition!
Example story: http://www.zdnet.com/article/windows-10-usage-continues-to-r...
[0]: https://en.wikipedia.org/wiki/BrowserChoice.eu
What does that even mean? That it blocks malware links from social engineering attacks? Seems like really confusing wording.
For example, that they actually compared the number of the malware sites they can block and counted more of them?
Instead it's the middle +1.
If I'd write a story about somebody who has to make up one, this would be it ;)
When you're penetrating the inter-tubes you should be protected.
Privacy Badger's goal is to block tracking cookies and similar tools. Ads can, by obeying "do not track" instructions and similar, avoid being blocked by Privacy Badger, and so while some ads do end up getting caught in Privacy Badger, many do not. Privacy Badger is about protecting your privacy, not preventing advertising.
Note that I've contacted the EFF regarding Privacy Badger on Edge, and they said they were working on it.
One could make the argument that making the push from the OS is a different level than from the website.
When people leave Google Search (and they will, nothing lasts forever), they'll leave fast.
Further, because of mobile, there are significantly greater number of Google users than there are Windows users.
I guess I am annoyed because as someone who uses Firefox as their primary browser, it always frustrated me that there was t more outrage at Google pushing people away from Firefox. But the moment MS started doing it, it became an outrage.
Accounts would be the hard part because that's my phone login, and there's no standard account service I could migrate to that would give me a functional replacement.
The real thing keeping me on the Google platform is the convenience of having these things tied together. But that's not exactly a strong lock for me. I can and do hop services while sacrificing convenience. This might be a stronger hold on others but it's still not Microsoft's you-can't-do-work-in-any-organization level of hold between Office, Windows, Exchange, etc..
* This has actually been annoying for me lately. The results favor the things I've already clicked on which is often exactly not what I'm after.
https://www.startpage.com/
https://duckduckgo.com/
http://ixquick.com/
https://searx.me/
1) You use Firefox, and Microsoft tells you that you should use IE instead. 2) You use Google Search, and Google tells you that you should use Google Search more often.
The first is similar to Google somehow placing notes in Bing Search that Google search is better, the second is similar to Microsoft telling IE users that IE is better than Firefox in [this metric].
I think 1) is ethically more questionable than 2).
Actually when you use google search, google tells you that you should use Chrome. The exact popup says:
https://en.m.wikipedia.org/wiki/Tu_quoque
If I login with Firefox, no such banner (I think because it would cause an uproar within the dev comunity).
The psychological burden of having to mentally validate my choice of browser every time I used Google was a factor made me switch away from Google, so maybe they've stoppped doing it now?
MS is unpredictable and I do not trust them. One day it might decide to put ads on wallpaper or something.
1. Apply security updates, so you are not vulnerable to easily solvable security risks.
2. Don't use Windows 10.
Disabling automatic updates isn't really a viable solution, and I will convey downvotes to people who advocate it.
As they switch to a cumulative update model, will you wildly down-vote people who think that breaking their system with 1 update out of 10 is somehow reasonable ? Or that excluding that update but installing others would make more sense, then:
a) leaving everything out for that month,
b) having an unusable system.
Morons like you who accept and even enforce this kind of "my way of the highway" attitude to the others are the reason MS can get away with it.
https://support.microsoft.com/en-us/instantanswers/20a98a29-...
> Some Windows 10 editions let you defer upgrades to your PC. When you defer upgrades, new Windows features won’t be downloaded or installed for several months. Deferring upgrades doesn’t affect security updates. Note that deferring upgrades will prevent you from getting the latest Windows features as soon as they’re available.
From:
https://support.microsoft.com/en-us/instantanswers/20a98a29-...
http://www.howtogeek.com/223083/what-does-“defer-upgrades”-i...
http://superuser.com/questions/923186/how-can-i-defer-update...
Few months ago I installed Windows 10 and decided to try Edge. Here's how Google responded to that:
1) Every time I went to google.com, I was presented with a notice that I should install Chrome and that I should set Google.com as my search engine
2) Google sent an email to my Gmail account telling me that I should install Chrome and use it instead.
3) Every time I went on Youtube.com, I was again pestered with notices that I should install Chrome.
And if you're a Firefox user, you've probably noticed "set your search engine to Google" every time you search on their site. But being an Edge user is 10x worse.
Google is THE WORST offender when it comes to pushing their own services.
EDIT: Here's the email that Google sent me... just found it: https://i.imgur.com/aTChPib.png
Having a monopolistic position on the desktop market and using that is a different ball game.
Whether you agree with that view or not, it's understandable that the OP feels there's an element of hypocrisy not from Google but from the internet community as to how they view these companies' efforts to spruik their products.
It seems they fixed a million things, and I got me a new default browser.
Not sure how long it will last.
But I've been on bing since the last time I got downvoted for complaining about google search. at least trying to copy the search link for http://www.thesaurus.com/browse/help doesn't result in: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&c...
I use Linux so my real choices are Chromium and Firefox so I don't use Edge.
Although thats still bugged to i believe.
Actually I'm not sure if Google Chrome will stay leading browser for much more. I already use Safari instead of Chrome, because it's enough for my needs. If Edge would be good enough, why install Chrome?
I am not suggesting that this current action violates the terms of Microsoft's settlement, only that there's relevant historical context here.
To be clear, I think both companies' whining is tacky and annoying.
And while Google bundles it's browser, like Microsoft did, it also bundles almost twenty applications now, which in most cases cannot be removed by the user.
So, yeah, twenty years ago, Microsoft did some bad things, but Google is doing much worse right now.
I agree that Google has not had a court find them an abusive monopolist, but I would add "yet." As someone who watched the Microsoft case start out in the tech press, then move to the mainstream press, and then finally become indictments the similarity to the process with Google is pretty interesting. If you follow the dollars, you can see how much money Google is paying for search traffic which squeezes out organic growth of competitors and were it not for Microsoft's warchest of cash probably would have killed off Bing before it became operationally profitable. And they use that search engine dominance to push the browser of their design which favors their products? That feels very much like Microsoft using their dominance in the OS space to push their browser which favored their products and technologies.
It's an amazing, stable and usable (except, you know...) operating system which for no logical reason, tries to alienate its users.
If this is greed on Microsoft's part, then I'm really sad to see such great engineering used to do such evil. If this is a popular operating system adapting to its average user, I'm extremely sad about this deep incompetence of the average user.
Probably both.
That's the unwanted or ignored outcome for their newest strategy.
MS shift is from developing and charging you $200 for greatly working operating system (and making this way $1B a year) to giving you the system practically free (hello Apple) and having you operate in one giant magnifying glass, where every move of your mouse and ever letter you type is send to MS to later digest and somewhat make decisions on what you want from life in terms of ability to advertise stuff back at you, whether from Bing that you use or in some way selling signals you send them to third parties so they serve you more "relevant" content making $1B plus a few more $Bs!
Conspiracy theory?? With fully working W10, from other than internet source load to your desktop photos of Ferraris, or simply name few photos "Ferrari". You will quickly see, within days how the ads being targeted to you on this computer are somewhat related to racing cars, luxury cars, etc.
I made up my mind already. Windows 7 with uninstalled telemetry crap is my last standing Windows. I just got new laptop and its got enough Windows 7 drivers to install clean copy. But moving forward I will have to be forced to go into Linux... at least glad my work doesn't require any sophisticated tools that work only on specific platform.
And before you jump about the RCE, MSFT has a very broad definition for what counts as code execution, most importantly they count any browser systemic XSS as RCE while Google classifies it as an XSS, same goes with any type of memory corruption MSFT classifies it as RCE while Google classifies it as DOS unless there is a fully proven POC.
Most of these vulnerabilities were also reported by MSFT and unlike Google MSFT submits CVE's for it's internally disclosed vulnerabilities while Google doesn't.
If Android is any indication Google certainly submits CVE's for their internally found vulnerabilities.
This is why this is quite different from Google advertising their products on their websites.
I don't see the difference.
From that viewpoint, you don't expect websites to be acting in "your" best interest, necessarily, since they're not "yours" - but you do expect "your" machine to doso, or at least not actively act against it.
To get an understanding of where I'm coming from, try this http://www.loper-os.org/?p=284
An article from mid 2016 about grading software security like car security quantifies this nicely. Edge wasn't in the comparison, but I look forward to future research on that:
https://theintercept.com/2016/07/29/a-famed-hacker-is-gradin...
Source:
https://blogs.windows.com/windowsexperience/2016/09/26/new-w...
http://www.pcworld.com/article/3124225/security/heres-how-mi...
https://www.cnet.com/news/microsoft-aims-to-gets-tough-on-se...
http://www.itworldcanada.com/article/microsoft-touts-contain...