Google Showed-off : Chrome OS

By Elinor Mills, CNET News.com
Tuesday, November 24, 2009 10:38 AM

Source:  http://www.zdnetasia.com/news/security/0,39044215,62059536,00.htm

With most computers threatened by attacks coming through Web applications, it’s no surprise that security would be a key piece of Chrome OS, Google’s browser-based operating system that stores data in the cloud.

Google showed off its new lightweight operating system designed for netbooks and cloud computing last week. As anticipated, it will rely on many of the same security features and concepts used by the Chrome browser.

“The browser is the operating system. We’ve expanded the browser to add operating system functionality,” Caesar Sengupta, a group product manager at Google, said in an interview.

Chrome OS uses a combination of operating system-level protections and exploit mitigation techniques to limit the attack surface, or amount of code that can be targeted in an attack, and to reduce the likelihood of an attack being successful. “The biggest security impact is that all applications run within the browser,” Sengupta said.

Chrome relies heavily on sandboxing, keeping different processes and applications in separate partitions. This limits the interaction between applications and the OS kernel.

For example, with conventional operating systems, if an application crashes, it can crash or otherwise affect other programs that are running, Sengupta said. “But if everything is sandboxed, that becomes more difficult to do,” he added.

Many systems are compromised by deceptive attacks, such as when a user opens an innocent-looking PowerPoint file which unleashes a virus or other malware that can get access to everything on the computer.

With Chrome, “applications can’t just download any binary and run it,” Sengupta said.

Chrome has a verified boot process that uses cryptography to ensure that the Linux kernel, the nonvolatile system memory, and the partition table are not tampered with when the system starts up, according to a security overview of Chrome. (Google security engineer Will Drewry explains the security concepts of Chrome OS in a video on YouTube.)

“Right now, on your conventional operating system, any kind of process can run, which makes it difficult to predict what any process will do,” Sengupta said. “On Chrome, because the whole operating system is essentially signed by Google, there is a lot we can do to make it secure.”

If an application manages somehow to break out of the browser sandbox, to get through the kernel hardening and processing infrastructure, and manages to change something on the operating system, the changes will be detected the next time the user boots up the machine. “As soon as it detects something is different and not signed by Google, it will warn the user and try to clean itself again,” Sengupta said.

Cleaning up is easier than with a standard operating system, too, because the system data is separated from the user data, which includes user preferences, system settings, and a local cache of data stored on the Google servers in the cloud, he said.

All user data stored by the operating system, browser, and any plug-ins are encrypted and users cannot access each others’ data on a shared device, according to the Chrome OS security page.

Meanwhile, Chrome will automatically update to get the most recent software and patches for the operating system, just like the Chrome browser updates in the background while users are online, Sengupta said. Users will not run the risk of having their system get infected or compromised before they can install updates, as happens with Windows and other software.

In addition, the antiphishing technology found in the Chrome browser will protect Chrome OS users from inadvertently visiting malicious Web sites, he said.

Google is publishing detailed design documents on Chrome OS, which will allow security experts to scour the code for weaknesses over the next year before the operating system is released to the public, according to Sengupta.

There are some security and networking technologies that are supported in other operating systems that Google is passing on, at least for now.

Google will keep an eye on biometric authentication technologies, but believes that the cost/reliability trade-off is not where it needs to be just yet, according to the security overview for Chrome OS. Smart cards and USB crypto tokens are “interesting technology, but we don’t want our users to have to keep track of a physically distinct item just to use their devices,” the overview concludes.

Google is likewise not interested in Bluetooth, a wireless protocol widely used in laptops and handheld devices. “Bluetooth adds a whole new software stack to our login/screenlocker code that could potentially be buggy, and the security of the pairing protocol has been criticized in the past,” the security overview says

97% Recomendation for Windows 7, from Intel testers

Source:  http://arstechnica.com/microsoft/news/2009/10/97-percent-of-intel-testers-recommend-windows-7.ars

Intel recently posted the results of a study titled “The Value of PC Refresh with Microsoft Windows 7″ in which it describes its experience while testing Windows 7 during the second quarter of 2009 for its own use within the company. As one would expect, Vista’s successor received much praise. 291 Intel users out of 300 said they found that Windows 7 showed improvement performance and stability over Windows XP.

Despite these positive results, Intel won’t deploy Windows 7 till the next year, according to the study: “During 2009, we plan to continue preparing for deployment by creating a Microsoft Windows 7 build and by installing the OS on systems in test labs to enable business groups to test applications and perform any necessary remediation. In the first quarter of 2010, we plan to begin deployment of Microsoft Windows 7 on new PCs with Intel vPro technology as part of our established refresh cycle. We intend to roll out the new PCs to segments of our user community based on factors including their job role and application requirements.”

The other nine users said they would not recommend the operating system to colleagues after using the beta for three months; yes, these results are based on the beta that arrived in January 2009 and which is no longer available because the RC and RTM versions have been subsequently released. “We encountered two issues during the evaluation, related to OS performance tuning and user account control,” the study states. “Both cases were due to a lack of understanding rather than the technology itself.”

Here’s the abstract of the report:

Following participation in Microsoft’s Technical Adopter Program (TAP), Intel IT found that Windows 7 running on PCs with Intel vPro technology delivers the best productivity for our employees & the best managed solution for IT. After three months of trial with over 300 users, 97 percent of our test users would recommend the new OS to peers and Intel IT sees the potential to save $11M over the next three years. Because of improved employee productivity, reduced costs, ease of deployment and enhanced security, Intel IT is rolling out Windows 7 to early adopters this year and enterprise deployments starting early 2010. Authored by John Gonzalez (OS Product Line Manager, Intel IT), this paper describes these benefits and results of Intel’s participation in the Windows 7 TAP.

In addition to the 97 percent statistic, Intel listed four other key results:

• Performance: More responsive for key tasks such as booting and launching productivity applications.
• Stability: Fewer users experienced blue screens.
• Application Readiness: No remediation required during evaluation; application readiness does not appear to be a roadblock to adoption.
• Total Cost of Ownership: Initial estimate of potential USD 11 million net present value.

Intel’s IT environment includes more than 100,000 PCs running Windows XP; about 83 percent of these are notebook PCs. Back in June 2008, we learned that the chip giant decided against upgrading its computers to Windows Vista after a lengthy analysis by its internal technology staff which found no potential benefits of upgrading to the newer operating system. The company did the same for Windows 2000 back in 2002: it simply waited a bit longer and moved to Windows XP.

In an open letter titled The New Efficiency, Microsoft CEO Steve Ballmer named Ford, Continental Airlines, Convergent Computing, Baker Tilly, and the city of Miami as organizations that had deployed Windows 7, in addition to Intel.

Windows 7: The Comparison Table

9 Touch Gestures in Windows 7 for Multi-touch Magic

Source: http://clubhouse.microsoft.com/public/post/659fa6d8-2d13-446e-ab80-a5a23bd4c9e9

The Touch Gestures are the basic actions you use to interact with Windows or an application using touch. If you have a touch-enabled monitor and Windows 7 installed, then virtually any program that works with Windows responds to your touch. These Gestures are built into the core of Windows, they are designed to work with all applications, even ones that were never designed with touch in mind. So Windows 7 is touch friendly throughout. Microsoft has come out, after lot of research with 9 gestures in Windows 7. Yes, there are just 9 Touch Gestures for Multi-touch. User can’t remember too many gestures easily and these 9 gestures are all natural ,whatever a user does in real world.

Let us see these 9 Touch Gestures required for Multi-touch magic in Windows 7-

Tap and Double-tap - This is the most basic touch action. This is what a click and Double click does. Works everywhere.

Panning with Inertia – This is for scrolling. Drag any part of page up or down with one or more fingers. “You’ll notice details that make this a more natural interaction: the inertia if you toss the page and the little bounce when the end of the page is reached”. This works in most applications that use standard scrollbars.

Selection /Drag –This is like mouse drag and selection. Touch and slide your finger on screen. This moves icons around the desktop, moves windows, selects text (by dragging left or right), etc. Works everywhere.

Press and Tap with second finger – This is like right click. Press on target and tap using second finger. Works everywhere.

Zoom – This is same as CTRL key + Scroll wheel. Pinch two fingers together or apart to zoom in or out on a document. Useful for photos or reading documents on a small laptop. Works in applications that support mouse wheel zooming.

Rotate - Touch two spots on a digital photo and twist to rotate it just like a real photo. Move two fingers in opposite direction or use one finger to pivot around another. Applications need to add code to support this.

Two-finger Tap – Tapping with two fingers simultaneously zooms in about the center of the gesture or restores to the default zoom – great for zooming in on hyperlinks. Applications need to add code to support this.

Press and Hold – Same as Right Click. Hold your finger on screen for a moment and release after the animation to get a right-click. This works everywhere. Same as the other Gesture of Press and Tap with Second finger.

Flicks - Flick left or right to navigate back and forward in a browser and other apps. This works in most applications that support back and forward. This is also very natural gestures when one wants to flick.

As you can see these are the 9 Touch Gestures in Windows 7 required for Multi-touch magic. Here’s the chart for the same -

And there are many Multi-touch enabled laptops which are are being launched and also some are already available in the market. You can also go just for a Touch enabled Monitor to experience this Multi-Touch magic in Windows 7. Such monitors cost about 20% more than a regular ones and will be available by end of the year. Microsoft has also created a Touch Pack with 6 different Multi-touch enabled apps which will only be installed by OEMs on Touch enabled  Laptops.

For all these to be seen in action , check this video which demos all the 9 Touch Gestures, all the applications of Touch Pack and also interviews Amish Patel –PM Windows Experience Group , who explains all about Multi-Touch in Windows 7. This is a must watch video to see the Multi-Touch Magic in action. The apps in the Touch pack are so good to interact.

Google Chrome OS : Reasons & Other Factor

Source: http://blogs.techrepublic.com.com/hiner/?p=2131

Google Chrome OS

Here’s what we know

• It will run with a Linux kernel as its base
• It will boot directly into the Chrome Web browser
• It will be aimed primarily at netbooks
• It will run on both x86 and ARM processors
• It will not be designed to have local storage; all data will be stored in the cloud
• Google will not entice developers to build software to run on the Chrome OS; instead, they want them to build Web apps that will run on any standards-based browser
• The three most important features will be “speed, simplicity and security,” according to Google
• Google will release the software to the open source community before the end of 2009
• Announced Chrome OS hardware partners: Acer, Adobe, ASUS, Freescale, Hewlett-Packard, Lenovo, Qualcomm, Texas Instruments, and Toshiba.
• Netbooks running Chrome OS will be available in the second half of 2010

This is Google’s official explanation of the problems that it is trying to solve with Chrome OS:

People want to get to their email instantly, without wasting time waiting for their computers to boot and browsers to start up. They want their computers to always run as fast as when they first bought them. They want their data to be accessible to them wherever they are and not have to worry about losing their computer or forgetting to back up files. Even more importantly, they don’t want to spend hours configuring their computers to work with every new piece of hardware, or have to worry about constant software updates. And any time our users have a better computing experience, Google benefits as well by having happier users who are more likely to spend time on the Internet.

Three reasons why it matters

3. Because Windows needs more competition
Nearly two decades after Microsoft Windows conquered the PC, very few real challenges have been mounted against its dominance. Long-time rival Apple Macintosh has recently had a resurgence, but it’s still hovering at less than 10% of the total market. This market is ripe for innovation and a new competitor. In many quarters, Windows fatigue has set in, especially in the notoriously price-conscious consumer market and in light of the Vista debacle. The virus, spyware, and security troubles of Windows are its biggest weaknesses and Google is wise to target those soft spots with Chrome OS.

2. Because Chrome OS will be cheap
Google has confirmed that the Chrome OS will be open source and will not have any licensing fees. That will enable Chrome OS-based netbooks to be cheaper than both Windows-based netbooks and ARM-based smartbooks from Qualcomm. Plus, once we start talking about nettops, it’s entirely possible that we could see a $100 PC (without monitor) running the Chrome OS.

1. Because it’s from Google
Google is the 800-pound gorilla of the Internet. Because of its brand strength and star power, it’s always a big deal when Google enters new markets. Nothing that Google does will go unnoticed or fail simply because it didn’t get enough exposure.

Four reasons why it’s virtually irrelevant

4. It’s running Linux
So is 2010 going to be the year of Linux on the desktop since Chrome OS is based on Linux? Every year for the past decade was supposed to be “The Year of Linux on the Desktop.” It hasn’t happened and it’s not because it was an idea ahead of its time or it needed a stronger champion. The mass market has rejected Linux on the desktop. Linux is nothing more (or less) than a niche OS loved by a loyal group of highly-technical users. Even Google can’t change that, unless it’s prepared to write Linux device drivers for all of the world’s printers, digital cameras, keyboards, and mice.

3. It’s too late
By the time Chrome OS is released, Windows 7 will be everywhere (at least in the consumer market) and Mac OS X will be faster and simpler with the release of Snow Leopard. If Google really wanted to make a powerful entrance into the OS market, the time to do it would have been mid-2007 when it was obvious that Windows Vista was a failure and it would take Microsoft a couple years to fix it. The opportunity for an OS to make a major impact on the PC market has passed. The OS just isn’t that important anymore. Windows and Mac both do a pretty good job of making the OS get out of the way as quickly and easily as possible. Chrome OS probably won’t be able to do that because it will start out with massive device driver incompatibilities with PC accessories.

2. Google hasn’t proven it can build an OS
Google hasn’t exactly knocked anyone’s socks off with Android, its mobile OS. While Android has potential and still has time to develop, it feels like beta software in a market that demands greater “finish” and attention to detail (see iPhone and Palm Pre). Plus, Android itself was originally touted to be a netbook OS. Therefore, the release of Chrome OS is a de facto indictment against Android, despite the fact that Google executives have tried to downplay it. Maybe Google has realized that the Java software sitting on top of a Linux codebase in Android would have severe performance limitations on a PC. Whatever the case may be, the fact that Google will have overlapping netbook operating systems does not inspire a lot of confidence that Google knows what it’s doing in the OS market or has a sound strategy.

1. It’s limited to netbooks
So here’s the skinny on netbooks. They have two great features: They are small and cheap. They also have two big drawbacks: They are terrible and a lot of consumers regret buying them (verified by a recent NPD survey). The consumer backlash against netbooks has already begun and by the time we see Chrome OS netbooks from Google’s hardware partners in the second half of 2010, the netbook phenomenon will either have retreated into the background or morphed into something better. And then Google will have to scramble to make Chrome OS available on a wider variety of notebook computers, as well as on nettops.