Post

Something completely underappreciated in how Google Chrome revolutionized the web and security and software in general — was the silent background auto-update + and non-admin user-level installs. It set a bar that changed everything on ability to make progress & address threats. Broke IT paradigms.

When Chrome came out, IT admins kept asking how it was possible users were installing it without admin? That's because they did not really understand the system. Developers and attackers in XP days were so used to users having admin they rarely bothered trying to make anything work without it.

2 reposts142 likes

However, Chrome was happy to install its files in the user's own profile, not the system level-level directories needing admin. You can do anything you want in your own profile. Chrome set up shop, slapped shortcuts on Desktop and Start Menu, there's no user-exposed difference in the end result.

Omg commentary from someone who was there at Google! I was going to get around to Omaha but it's possibly too in-the-weeds. It's unfortunate so many rely on weaker less mature and secure update system alternatives to it, but they are dumb-simple. bsky.app/profile/h.ol...

Joe Beda@h.olysh.it

We actually started this with the Windows Google Talk client. We wanted a native app that had a lifecycle similar to the web. The update code got pulled out as a project called Omaha (github.com/google/omaha) and was then used in Chrome.

Yes! How Google taking absolute end to end ownership of update results was an incredible bar to raise. No more blaming users they hit the update button when something breaks, or didn't when they were hacked. You have to own the entire lifecycle including breaking changes. bsky.app/profile/h.ol...

Joe Beda@h.olysh.it

Of course! More lore: Auto update is *hard*. If you get it wrong you either strand users on old versions or turn it into a DDOS against your update servers.

Most people talking about Chrome's innovations would first highlight the security sandboxing and V8 JavaScript, but it was truly a revolutionary epoch in ecosystem norms. Or, why don't you hear about PDF hacks much anymore? ~Adobe adopted Chrome sandbox code. (Fun fact IE7 had sandbox long story)

This is a real problem with Linux as a whole as you need to act and use super user access to do updates. Still, the updates are more comprehensive and faster and generally the different distro tools can do it with simple clicks or CLI prompts. You do have to choose communism though

I remember when it came out and so many fellow engs being indignant that they would take control away from users that way. No one cares about what version of Gmail they are running tho. Auto updates were such a big deal

I loath how Chrome (and later Teams) decided it was a good idea to install themselves into $UserData$; It breaks the paradigm of separating code and data. It also opened a whole new vector of attacks - Don't crack the OS, just pwn the user, and run your backdoors in $UserTemp, leeching their data.

Funny story: Years ago my high school bought a ton of thin clients for all the classrooms. They ran some mini-remote Windows thing with basically nothing installed. Obviously no way for students to install programs on them *except*:

I found out I could of course install programs *in* my Start Menu folder. Which ended up being genuinely useful to get WinRAR installed for some school stuff, but also allowed me to install a clock program because they had disabled the taskbar clock. ☹️

I blame the Windows 3.1/95 days for this. Users had access to the entire system, so developers got lazy and plonked their files anywhere they liked, especially places like C:\WINDOWS\SYSTEM32 and such.

Then NT-based Windows came along, and people wanted to install that same software on systems that had user-level security. OOPS, now we need admin to write those DLLs and such. Took a LONG time for developers to just stop assuming they'd have admin access to install. It's a good trend.

Years ago I literally remember installing it on random university computers and showing others they could do it too, I think it might have triggered a privilege escalation prompt but I remember finding you could just go "nah" and it'd work fine anyway.

Ugh, in the XP days, I was running some version of NT (Win 2000?) that wasn't giving admin private by default. The admin promps made me aware of how much apps were using admin. Applications that were Windows certified rarely did that.

I remember this in a hospital as a desktop support! We were supposed to escalate _any_ instances of Chrome being found an a computer because it wasn't approved software. In reality, the machines were so locked down they assumed it was allowed! What's worse, sometimes it *fixed* sites for them!