News for hackers. Stuff that matters.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @11:01AM (#17559030)
Actually, the biggest thing in Chrome's favor was being an installer pack-in. People still get sometimes Chrome installed on them if they go download Adobe Reader without unchecking the box. (McAfee Security Scan Plus is Adobe's other paid pack-in, you might see that instead, depending on your location.) People seem to vastly forget that a large part of Chrome's dominance of the ordinary user is the fact that installing half a dozen plugins or tools on Windows has or still installs Chrome and sets it as your default browser.

When doing PC support for layusers, I've found that: Most people don't know what Chrome is, and don't know the difference between it, Edge, IE, and the malicious Chromium fork they have installed on their PCs. (Side note: May the soulless individuals behind the "WebDiscover Browser" suffer a life of misery and despair as punishment for their crimes.) They end up with Chrome (or a malicious fork thereof) due to a bundle installer.

Re:European Commission fines Google €4.34B in Android antitr... by lloydde on Wednesday July 18, 2018 @12:02PM (#17559568)
What Chrome also did far better than everyone else was a user local install, ie an install that didn’t require admin on the PC. Shadow IT installs was a huge advantage over Firefox in Chrome’s first years.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @12:16PM (#17559662)
I still have to fight this occasionally. :| In one instance, I ended up just telling the antivirus software at a company to flag Chrome as a virus and block it from executing. Software installation requiring admin rights is by design, and circumventing it is unethical as heck.
Re:European Commission fines Google €4.34B in Android antitr... by praseodym on Wednesday July 18, 2018 @12:47PM (#17559948)
If you rely on the lack of admin rights to prevent unauthorised software from being run you’re doing it wrong. You should be using whitelisting (e.g. AppLocker in Windows) which also prevents “portable” applications (without an installer) from being used.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @02:34PM (#17560931)
I don't disagree, but a significant majority of IT environments are "done wrong".
Re:European Commission fines Google €4.34B in Android antitr... by TeMPOraL on Wednesday July 18, 2018 @05:36PM (#17562282)
The eternal conflict between lowly workers trying to get their job done and the IT department trying to prevent them from doing their jobs to make their own life easier, based on the notion that if users can't use the infrastructure, they can't break it.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @06:47PM (#17562647)
Obviously, Chrome is not needed to do their jobs. If it was, it'd be provided. Browsers, especially Chrome, are a massive malware ingress point, it makes zero sense for end users to install them.

IT actually exists to help ensure people can do their job, and do their job faster. As a general goal, I like to learn about people's business processes for the exact purpose of seeing how our IT environment can be improved to expedite their work.

And having five browsers on a PC doesn't make it easier for end users. I have no problem dealing with five browsers, but I get a lot of complaints from people when they open link A in browser B and link C in browser D and don't understand why things don't work.

You may have experienced poor IT departments in the past, or thought you experienced poor IT departments because you didn't understand the other considerations in play, but that's hardly an excuse to assume any given IT choice is some sort of attempt to prevent employees from doing their jobs.

Re:European Commission fines Google €4.34B in Android antitr... by TeMPOraL on Wednesday July 18, 2018 @11:58PM (#17563853)
> If it was, it'd be provided.

That's a faulty assumption right there. Usually, people providing workers with their computers and software have limited idea what those workers actually need to work efficiently. This works out fine when workflows are defined so well a trained monkey could do the job, and fails miserably when the worker needs any sort of creative control over their workflow or work output (programmers, designers, all sorts of engineers and technicians, etc.). Most corporate work is probably closer to monkey level than to creative level, but enterprises love to do company-wide policy changes, making all work conform to lowest common denominator.

> You may have experienced poor IT departments in the past, or thought you experienced poor IT departments because you didn't understand the other considerations in play, but that's hardly an excuse to assume any given IT choice is some sort of attempt to prevent employees from doing their jobs.

I've experienced one competent IT department in my life, and their best quality was helping shield our programming team from policies like application whitelisting or limiting admin access, that they were forced to deploy company-wide. For other IT departments I dealt with, most of their actions were explainable if viewed through the lens of caring about the infrastructure to the extreme - that is, "if no one uses it, no one will break it" approach.

Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Thursday July 19, 2018 @05:00PM (#17570211)
> That's a faulty assumption right there. Usually,...

You accuse me of making a "faulty assumption" about my own environment, and then proceed to assume that you can speak for most/all IT environments.

When I state "if you need Chrome, we'll provide Chrome", that's true of my environment. It's also true of my environment, if we don't provide Chrome, and you find a way to install it yourself, you'd be violating policy, and barring the casual mistake of not knowing that, potentially referred to HR. Obviously, in the ideal "don't need to involve HR" case, we just make sure you can't install it.

Now, what isn't just true of my environment, but true of all environments, is that users installing random web browsers is incredibly dangerous, and something every IT department should be preventing if they own the hardware. I don't think that's even a controversial statement, I'm confused why it's being treated like one.

Re:European Commission fines Google €4.34B in Android antitr... by mr_toad on Wednesday July 18, 2018 @10:52PM (#17563636)
Installation requirements are mostly a hangover from the days when Windows PCs weren’t locked down and anyone could write to the system folders and admin rights were just assumed.

Software developers often didn’t bother testing or ensuring that their software would install (or even run properly) without admin rights.

Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Wednesday July 18, 2018 @02:05PM (#17560677)
If you try that on my box, your admin rights will be removed. Preventing me from installing necessary software to do my job is unethical.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @02:35PM (#17560943)
Users who have a valid necessity for Chrome can have it, in a very controlled fashion (extensions and cloud features disabled) on request and review.
Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Wednesday July 18, 2018 @02:43PM (#17561003)
Im ignoring that request and review process. I don't need a beaucratic process. Im just going to do it.
Re:European Commission fines Google €4.34B in Android antitr... by s73v3r_ on Wednesday July 18, 2018 @08:10PM (#17563089)
That's not your box, though. It's your employers.
Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Wednesday July 18, 2018 @10:36PM (#17563589)
Not necessarily. Byod is commom. And quite frankly even if it is my employers box im not gonna put up with restrictions against installing a web browser. Or deal with some paperwork request, I'll work around it and just do it.
Re:European Commission fines Google €4.34B in Android antitr... by lovich on Wednesday July 18, 2018 @10:59PM (#17563665)
Who would bring their own equipment to work in software unless they are a founder? That's like paying to work. Especially when employers like to claim ownership rights to all data generated by their employees in the course of business.

Mechanics bring their own tools frequently but their employers don't try to repo their personal vehicles just because the mechanic used the same tools at home and at work

Re:European Commission fines Google €4.34B in Android antitr... by paulie_a on Thursday July 19, 2018 @09:12AM (#17565883)
It's fairly common to byod. Just think about personal phones. Do you have corporate phone or do have slack installed on your personal one?
Re:European Commission fines Google €4.34B in Android antitr... by lovich on Thursday July 19, 2018 @12:34PM (#17567945)
I don't have work slack on my personal phone on principle. If the company wants to require me to be available on their systems they need to provide the hardware
Re:European Commission fines Google €4.34B in Android antitr... by arcbyte on Thursday July 19, 2018 @11:57AM (#17567500)
My company hands us out shit laptops running 10 different layers of security devices. Fuck that. I bring my Surface Pro in and actually enjoy my life.
Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Thursday July 19, 2018 @05:07PM (#17570274)
Are you running your personal hardware (without the security) on the internal network? Please tell me you don't have the same level of access with personal hardware as you do with the corporate equipment.

Even in a BYOD environment, an organization should be ensuring any devices granted access to resources are appropriately patched and secured.

Re:European Commission fines Google €4.34B in Android antitr... by s73v3r_ on Thursday July 19, 2018 @12:38PM (#17567998)
I can understand that. I just don't want to have a reason why my employer could call me in off hours, nor for them to claim ownership of stuff I've done.
Re:European Commission fines Google €4.34B in Android antitr... by s73v3r_ on Thursday July 19, 2018 @12:37PM (#17567975)
But then you're the unethical one, here.
Re:European Commission fines Google €4.34B in Android antitr... by codedokode on Wednesday July 18, 2018 @12:56PM (#17560038)
Chrome was also offered when downloading Adobe Flash and as I remember it was often bundled with various free software.
Re:European Commission fines Google €4.34B in Android antitr... by dmix on Wednesday July 18, 2018 @11:40AM (#17559365)
I don't see how partnering with a few other software companies to distribute software via installers is a bad thing or a sign of monopolistic practices (aka limiting competition and harming customers by forcing them to use a product they wouldn't otherwise)...

It's a bit shady to make it 'automatically the default browser'. But that is a problem with the OS. An installer shouldn't be able to make that choice for the user.

Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @12:19PM (#17559694)
They fixed this with Windows 10, actually. Which of course, upset people because it defaults people to Edge, and asks people to give Edge a try when they change it.
Re:European Commission fines Google €4.34B in Android antitr... by dmix on Wednesday July 18, 2018 @12:27PM (#17559772)
True, I remember seeing that now on my moms laptop. I remember it was quite aggressive in warning you not to switch away from Edge.

Microsoft can never let the marketing people stop having control and ruining their products. They are trying to make it more useable and user friendlier, but it's funny seeing the push back within the product.

Re:European Commission fines Google €4.34B in Android antitr... by ocdtrekkie on Wednesday July 18, 2018 @12:36PM (#17559842)
I've recently said that Microsoft is the most self-defeating company in history. They often take all of the goodwill they've earned, and then torch it on minor battles that aren't really making them any money. If someone's gotten into the settings screen to change their default, they probably have tried Edge, or at least know what it is and have some reason for switching.

Windows 10 telemetry is a great example: They shot themselves in the foot PR-wise on an otherwise excellent operating system, chasing a pile of metadata that won't really be significantly more useful than what they get from people who voluntarily agree to be Windows Insiders. There isn't a good business case for preventing people from shutting off error reporting, and it's had a huge impact on mitigating all of their other efforts to repair their image.

Re:European Commission fines Google €4.34B in Android antitr... by TeMPOraL on Wednesday July 18, 2018 @05:43PM (#17562325)
I'd say the forced update from 8 to 10, with all the UI dark patterns, was even worse. An OS "collecting telemetry" on you was mostly an abstract problem for non-technical users. An OS trying to annoy and trick you into updating to that scary "telemetry version" - that's another thing, and I know plenty of people who were pissed off about that. Hell, my own mother sticks to 8 and still refuses to entertain the thought of using 10 precisely because of those attempts at forced upgrade.

It's a shame, really, because Windows 10 is a decent OS, and it fixed most of the issues with 8.

Re:European Commission fines Google €4.34B in Android antitr... by pjmlp on Wednesday July 18, 2018 @04:18PM (#17561751)
That kind of behaviour is easy to understand when one works at any Fortune 500, specially those whose main business isn't software related.

It doesn't matter how much goodwill a specific department might have, power struggle and department differences always end up impacting it.