Chrome requires Google Updater, and Google Updater's security model is 
undocumented and appears to allow a site to silently install and run software 
on your computer (the verification step is implemented in JS, not in the 
updater plugin itself). Possibly it's locked down so only Google can do this, 
but they don't tell you how it works or what precautions they took.

Reply via email to