A new version of the most popular web browser, Google Chrome is out. Version 64 has reached the stable branch and is now available for Windows, Linux and Mac. Here are the key changes.
Chrome 64 is a long-awaited browser version because it finally comes with protection against the infamous Meltdown and Spectre CPU flaws. The browser includes updates to the built-in V8 JavaScript engine to enable protection against these vulnerabilities.
If you are not aware about the Meltdown and Spectre vulnerabilities, we have covered them in detail in these two articles:
- Microsoft is rolling out emergency fix for Meltdown and Spectre CPU flaws
- Here are Windows 7 and 8.1 fixes for Meltdown and Spectre CPU flaws
In short, both Meltdown and Spectre vulnerabilities allow a process to read the private data of any other process, even from outside a virtual machine. This is possible due to Intel's implementation of how their CPUs prefetch data. This cannot be fixed by patching the OS only. The fix involves updating the OS kernel, as well as a CPU microcode update and possibly even a UEFI/BIOS/firmware update for some devices, to fully mitigate the exploits.
Chrome 64 also incorporates an improved ad-blocker. It will be able to detect links disguised as play buttons and site controls. Such sites abuse the user experience by tricking the user into opening popups.
The browser will prevent transparent overlays from being exploited. Such overlays open a new browser window with some unwanted web site showing ads which then redirects to another website. Also, it will block third-party iFrame code from running if the user had no interaction with it.
Google also claims to have added some built-in protection against malicious auto-redirects.
Another interesting change is HDR video support on Windows 10 was also added. We've reviewed it in the following article:
Google Chrome to support HDR videos on Windows 10
Finally, there is a new site-wide auto-mute option to get rid of unwanted background sounds. It is implemented as a permissions option which can be set for specific sites which play annoying sounds. Check out the new option under Settings -> Advanced options ->Privacy and Security -> Content Settings -> Sound. Videos that automatically play with sound are also now disabled by default.
Chrome now offers setting a vast array of site-wide and per-site permissions - Cookies, Location, Camera, Microphone, Notifications, JavaScript, Flash, Images, Popups, Intrusive Ads, Background Sync, Sound, Automatic Downloads, Unsandboxed Plugin access, Protocol Handlers, MIDI devices, Zoom levels, USB devices, PDF documents, Protected Content. This is extremely impressive because such level of user control is essential for the modern web. Now would be a good idea to open Chrome preferences and set these content settings in detail.
If you are an existing Google Chrome user, you should get the update automatically. The browser can be downloaded from this page:
The official announcement can be found here.
Support us
Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options:
Is it for 32bit version for Windows too?
I mean does it protect from meltdown & spectre even though on 32 bit version for Windows too?
Hmm, it must protect the user on 32-bit Windows too.
:)
Писал на русском форуме, но напомню здесь:
Error: mysql: Access denied for user ‘nginx’@’localhost’ (using password: NO)
когда оцениваешь комментарии
Это где? На винревью-то?Ага, вижу. Удалил эту фукцию вообще.