Internet Explorer 8, Firefox 3, Google Chrome 4, Apple's Safari 4, and Opera 10 include features that block sites known to host malware and malicious downloads. All but Opera also let you browse without leaving any tracks. But just as important as these protections is ensuring that whichever browser you use is thoroughly patched.
Filtering out bad sites
Firefox's built-in antiphishing tool claims to update its bad-site database 48 times a day, according to Mozilla's Firefox security page. Firefox 3 uses Google's Safe Browsing service to automatically block sites that are known to host malware. The Google Code site describes how Safe Browsing works in Firefox.
To verify that attack-site blocking is enabled in Firefox, click Tools > Options > Security and make sure "Block reported attack sites" is checked.
Firefox will prevent known-bad sites from opening when "Block reported attack sites" is checked.
(Credit: Mozilla Foundation)The same feature is built into Google's own Chrome browser. You can ensure that malware-site filtering is on in Chrome by clicking the wrench icon in the top-right corner, choosing Options, and selecting Under the Hood. "Enable phishing and malware filtering" should be checked. The Google Chrome Help site describes the feature. (Hint: This page looks very similar to the description on the Google Code site.)
Google's Chrome browser blocks known-bad sites when "Enable phishing and malware protection" is checked.
(Credit: Google)The SmartScreen technology in version 8 of Internet Explorer blocks known-malicious downloads as well as bad URLs. Other new security features in IE 8 include automatic blocking of click-jacking and cross-site scripting attacks, automatic crash recovery, and highlighting of the actual domain name in the address bar. The Microsoft Security site describes the SmartScreen Filter and includes links to a SmartScreen FAQ and information for site managers.
Apple's Safari browser added phishing and malware blocking in version 3.2, which was released in late 2008; read about this and other security features in Safari 4 on the Apple Safari site. Likewise, Opera's Fraud Protection predates the phishing and malware filters in IE and Firefox and is enhanced in the latest version 10. But attack-site blocking is only one of Opera's many security features, which you can read about on the Opera site.
Browsing in private
To activate private browsing in Firefox 3, click Tools > Start Private Browsing, or simply press Ctrl-Shift-P. You can set Firefox to start in private-browsing mode by clicking Tools > Options > Privacy and check "Automatically start Firefox in a private browsing session." The Mozilla support site provides more information about this feature. Likewise, put IE 8 in private-browsing mode by clicking Safety > InPrivate Browsing, or by pressing Ctrl-Shift-P. You can also open a new tab and click either Browse with InPrivate or Open an InPrivate Window.
IE 8 also lets you control the information about your browsing habits that's shared with Web tracking services. To activate this feature, click Tools > InPrivate Filtering Settings and choose "Let me choose which providers receive my information." This opens the InPrivate Filtering settings dialog, where you can turn filtering off, choose which services to block from tracking you, or automatically block all trackers.
Internet Explorer 8's InPrivate Filtering lets you block some or all Web tracking services.
(Credit: Microsoft)You can open an incognito window in Google Chrome by clicking the wrench icon in the top-right corner and choosing "New incognito window," or simply press Ctrl-Shift-N. The incognito icon (a shadow figure in a fedora and glasses) appears in the top-left corner of the browser window. The Chrome support site offers a more detailed description of this feature.
Opera lacks an equivalent private-browsing capability but does offer private searching and other identity-blocking features, as described on the Opera site. To activate private browsing in Safari, simply click Safari Settings Menu > Private Browsing.
Automatic and not-so-automatic browser updates
Patching is a way of life with nearly all software, but especially with browsers and the media players associated with them: Adobe Reader, the Flash Player, Apple's QuickTime, and Sun's Java, among others. All of a browser's security features can be rendered useless by a piece of malware that takes advantage of an unpatched hole in the program.
Firefox 3 alerts users to the presence of an update and now also notifies you when your Flash Player is out-of-date. Internet Explorer 8 updates via the Windows Update/Microsoft Update services. Google Chrome made a splash by being the first browser to update itself in the background without requiring any prompting from users. Safari updates automatically via Apple's update service, which also serves up patches automatically for QuickTime, iTunes, and other Apple software. Opera also notifies you automatically when a new version is available.
But updating is too important to leave to others. Back in April, I described Secunia's Online Software Inspector and downloadable Personal Software Inspector, which identify out-of-date programs on your PC. The programs mentioned in that post have all been updated since, but Secunia's services should point you to the most recent versions.
(Note that Secunia sometimes reports a program as being out-of-date when in fact you have the latest version. On my PC, it continually reports my up-to-date Flash Player as being in need of an update, for example. But the free service Secunia provides is worth putting up with this and similar minor annoyances.)
The first thing I saw when I booted my PC yesterday evening was a notice that Google had prevented my default search setting from being changed. I certainly didn't want to switch from searching via Google by default. I hadn't even been considering a search change, regardless of Bing's pretty wallpaper.
The Google Toolbar prevented Windows Search from changing my default search setting without my permission.
(Credit: Google)To find out what program was trying to change my search default, I opened Vista's Event Viewer by pressing the Windows key, typing event viewer, and pressing Enter. I clicked Application in the left pane and scrolled to the approximate time the warning popped up. It took all of about two seconds to realize that Windows Search Service attempted to change my search default.
Vista's Event Viewer identified the Windows Search Service as the likely source of the attempt to change my search default.
(Credit: Microsoft)Well, I can't prove it based solely on the Event Viewer logs, but it's safe to say the search service is the prime suspect. I was relieved that Google prevented the change, but I couldn't recall asking the company to do so. I found the alert setting in the options of the Google Toolbar in Internet Explorer.
The Search tab in the Google Toolbar options lets you generate an alert whenever a program attempts to change your default search setting.
(Credit: Google)Ironically, I couldn't find a comparable setting in the latest version (5.0.20090324) of the Google Toolbar for Firefox, which is my default browser.
The Google Toolbar for Firefox lacks a setting that generates an alert and prevents programs when they attempt to change your default search setting.
(Credit: Google)Should you find your search default has been changed unexpectedly, resetting it is a breeze. In Firefox, type about:config in the address bar and press Enter. Browse to and double-click browser.search.defaultenginename. Type the name of any search service listed on the search drop-down menu and press OK.
To add a search engine to the list, click Manage Search Engines and then Get more search engines. Download your engine of choice and restart Firefox to see it among the search options on the menu.
To make the same change in Internet Explorer 8, click the down arrow to the right of the search box and choose Manage Search Providers. Make your selection and choose Set as default. Or choose Find More Providers, pick a search service, and click Add to Internet Explorer to broaden your IE search options.
To change your search default in Google's Chrome browser, click the wrench icon in the top-right corner, choose Options, and make your selection in the "Default search" drop-down menu near the bottom of the Basics tab. Unfortunately, there's no easy way to add search providers to Chrome's list, though you may see more options by clicking Manage, choosing one of the services listed, and clicking Add.
Internet Explorer 8 now comes with a Nickleback.
No, Microsoft isn't again offering cash to get people to download the browser. This time it has partnered with Live Nation and the band to offer a custom version of the browser.
(Credit:
Amazon.com)
The software maker is sponsoring Nickleback's 2009 tour as well as Live Nation's Bamboozle music festival. As part of the tie-up, users can download music-themed versions of the browser.
Those who download Internet Explorer 8 from a special Web site gain access to a new live version of Nickelback's hit single "Something in Your Mouth," as well as video of the band on tour. There is also a Bamboozle version of Internet Explorer 8 available at a separate Web site.
Microsoft routinely allows others to create and distribute custom versions of its browsers. Of course, the timing of this is rather interesting considering it comes the same day that Mozilla launched Firefox 3.5, the latest version of its Web browser.
There is also a start-up, Brand Thunder, that creates custom branded versions of Firefox.
Go to Tools and select Manage Add-ons.
Then select Search providers.
You'll see Microsoft Live Search and whichever options you chose during install. If that was Live Search, that's all you'll see.
Now click Find more search providers.
You'll get a list of various options. Press "Add to Internet Explorer" to add the providers you want. Each time you'll get the option to make it a default search provider, and include terms in the suggested search terms. If you don't see your favorite. Scroll to the bottom and click "Create your own search provider."
Now open a new tab, and enter the URL of the search engine you want to include. Search for the word TEST in all capital letters. Copy the URL of the search results page by highlighting it and pressing the "Windows" and "C" keys at the same time.
Now click back to the tab that says "crate your own search provider." Use the "Windows" and "V" keys to paste the URL you copied earlier into the box marked URL. Then give the search engine a name. And press Install Search Provider. If you want to make this your default search provider, check that box. Then press Add one more time.
Now when you type a keyword in the search box, icons for all the search engines you selected will show up. Just click on one with your mouse to search the keywords you typed in that engine.
Internet Explorer 8 is now ready to download. We installed the final build of Microsoft's latest browser, and captured the (looong) download process and our first impressions of some of the featured highlights in pictures.
If that's not enough (it never is,) CNET's Ina Fried has the full story of Microsoft's launch of IE 8 at Redmond's MIX 09 conference, and some details about a version of the browser for Windows 7. Also stay tuned to Download.com for our forthcoming video review and an in-depth look at the features and faults we find with Internet Explorer's latest iteration--and how IE compares with browsers Firefox, Google Chrome, and Opera.
LAS VEGAS--Aiming to better compete against a growing list of rivals, Microsoft on Thursday is launching Internet Explorer 8, the latest version of its Web browser.
IE 8, as the browser is known, was first shown a year ago and has been in testing for months. The new browser adds security improvements, a private browsing option, as well as the ability to save pre-defined "slices" of a Web page for at-a-glance viewing.
But perhaps the biggest change in the browser is one made behind the scenes--the decision to make the browser better adhere to Web standards. That should make life easier for Web developers in the future, but also poses compatibility challenges for sites that are optimized specifically for older versions of IE. In part to address this, Microsoft has a "compatibility" mode that lets Web sites indicate if they would prefer to be run by an engine that is more like older versions of the browser.
As expected, Microsoft is using the Mix 09 conference for Web developers as the launchpad for IE 8.
The release of IE 8 comes as Microsoft has been losing share to leading rival Firefox and also seeing stepped-up competition from Google and Apple, among others. The global market share of Internet Explorer, which was more than 90 percent in 2004, ended last year at just above 70 percent, according to Net Applications.
Both Google and Apple have been touting the performance of their new JavaScript engines, but Microsoft has sought to downplay speed concerns. The company last week released a video it says shows that, in many cases, IE 8 is just as fast as other browsers in loading popular Web sites.
"In most cases the difference could literally be measured by a blink of an eye," said Microsoft Senior Director Amy Barzdukas. "That kind of speed becomes almost a push."
Despite IE's waning share, the European Union has said it is considering sanctioning Microsoft for bundling a Web browser into its operating system in the first place, a move that it says appears to violate its antitrust laws.
As for IE 8, Microsoft will make it available for download beginning at 9 a.m. PDT on Thursday, but will wait a while before it begins to push it to Windows users who have their computers set to get the latest updates automatically.
A version of Internet Explorer 8 will also be built into Windows 7, though it is one of many Windows components that users will be able to turn off if they wish.
As for the future, Microsoft isn't saying much about its browser plans, but corporate vice president Mike Nash did seek to quash speculation that IE 8 will be the end of the road.
"I can't say what it will be called," he said of the next version of the browser. "But we're not done."
According to Chris Holmes, build 7048 of Windows 7 includes Internet Explorer as one of many Windows components that can be turned on or off via a Windows Features dialog box. In the public beta version, IE8 is not on that list.
(Credit: Chris123nt.com)Microsoft has included in recent Windows 7 test versions an option to turn off the Internet Explorer 8 Web browser, according to testers who have used the recent builds.
According to Chris Holmes, build 7048 of Windows 7 includes Internet Explorer as one of many Windows components that can be turned on or off via a "Windows Features" dialog box. The control panel exists in the public beta version of Windows 7, but IE8 is not listed among the features that can be turned on and off.
Microsoft declined to comment on the feature's inclusion as well as the reasons behind the move. Others are speculating it might have something to do with the European Union's objection to the inclusion of a browser within Windows.
The software maker has cautioned that the EU may seek to have Microsoft allow PC buyers to choose their browser and then require Microsoft to disable certain IE code if a user chooses a non-Microsoft browser.
Enthusiast site AeroXperience has more detail on how IE can be toggled on and off and what exactly that might mean.
As we've already noted, Microsoft is making a number of changes to Windows 7 as it moves from the beta to "release candidate" stage. However, the IE change was not one that was called out in a recent Microsoft blog posting on the topic.
Of the two big browsing features of 2008, one seems to run counter to where developers are driving their browsers. The melding of the location bar to the search bar was expected in Firefox and Opera, thanks to beta versions. Chrome has it, too, calling it the Omnibar. What seems to have caught developers off-guard has been the clamor for a universal switch to stop the cache and browsing history from recording anything at all.
Internet Explorer 8's InPrivate.
(Credit: CNET Networks)Microsoft's InPrivate debuted in Internet Explorer 8 beta 2, and Google Chrome's version is the well-received Incognito feature. So far, in Firefox, the feature has only been available via the Stealther plug-in, which basically copies all the features of InPrivate except that you don't have to open a new browsing window. Now, Mozilla has announced through the Firefox 3.1 status tracker that a privacy toggle will be a baked-in feature.
It turns out that Mozilla has had such a toggle on its radar since 2004, when Apple's Safari introduced a cache-avoiding browsing session. So what took so long for Firefox to decide that this should be a rolled-in feature? As others have noted, Firefox director Mike Beltzner declared that the feature would need to take a backseat to keeping the browser on schedule.
Google Chrome's stealth mode, Incognito.
(Credit: CNET Networks)Pressure from this being a near-universal feature has no doubt accelerated its importance, although Mozilla plans to put its own spin on what it can do. In addition to turning off the page cache and the browsing history recorder, there will be no autofill for passwords and new passwords used will not be saved. Also, all cookies acquired during the session will be discarded, as will downloads in the Download Manager. Essentially, pages visited will be stored in the memory, not on the hard disk--although there's no word on if or how this will affect performance.
Another aspect of the current unnamed feature will save all tabs and close the session, re-opening a new blank browser window. When the private session is finally turned off, the older session will re-open. One difference from Microsoft's InPrivate will be that there won't be any neon advertising that private mode has been activated, according to Mike Connor, the lead developer on Firefox. The fact that you are using a privacy mode will remain private.
Microsoft has released Internet Explorer 8 beta 1, but so far it doesn't seem to be the drastic overhaul that Internet Explorer underwent with version 7. That's not to say that there aren't any substantial new features, like the potential for Firefox extension importing, but this beta indicates that Microsoft is building on what they created in the last version, not reinventing their wheel.
Microsoft is promoting the Activities and Web Slices, a "web clips" feature that updates only selected parts of Web sites, such as front-page headlines or eBay auctions. What I found most interesting is that during the installation process, when you are asked if you'd like to import from another browser IE8 includes "extensions" with "bookmarks" and "feeds".
IE 8 beta 1's installation asks users to import their Firefox extensions.
(Credit: CNET Networks)Yup. Extensions.
Never say never, but I think the chances of the final version of IE8 supporting Firefox XPIs is slim. What's more likely is that Microsoft is trying to build the IE community and developers into creating more add-ons for IE. In this beta, when you import extensions, IE opens up the Windows Marketplace Web site and automatically searches for analogues to your Firefox extensions.
The Activities feature is a place to consolidate things you do on the Web: blogging, searching, word definition, and so on. There's also a toolbar button that switches the rendering engine back to IE7, but it requires a browser restart and frustratingly there's not a button for that.
The default setting for IE8 is to strip out the favorites from behind their toolbar button in IE7 and give them their own toolbar, but this actually detracts from the slick interface design. As with most Microsoft products, IE8 requires a system restart.
Empirically, pages seemed to load at about the same speed or a little bit faster as compared to IE7. Compared with Firefox 3 beta 3, though, and Firefox was noticeably faster on graphics- and script-heavy pages.
Don't forget that this is a beta release, and so it's likely to be very buggy and work imperfectly at best.
- prev
- 1
- next









