quote:

---

11. Content license from you

11.1 You retain copyright and any other rights you already hold in Content which you submit, post or display on or through, the Services.

---

said by sivran :

I believe part 11.1 to pertain more to such services as YouTube, Docs, Picasa, Pages, Blogger, etc. than to the browser itself. The license applies to "Everything Google" but this clause really doesn't have any bearing on the browser.

quote:

---

1.1 Your use of Google’s products, software, services and web sites (referred to collectively as the “Services” in this document and excluding any services provided to you by Google under a separate written agreement)

---

quote:

---

Google’s shiny new Web browser is vulnerable to a carpet-bombing vulnerability that could expose Windows users to malicious hacker attacks.

Just hours after the release of Google Chrome, researcher Aviv Raff discovered that he could combine two vulnerabilities — a flaw in Apple Safari (WebKit) and a Java bug discussed at this year’s Black Hat conference — to trick users into launching executables direct from the new browser.

Raff has cooked up a harmless demo of the attack in action, showing how a Google Chrome users can be lured into downloading and launching a JAR (Java Archive) file that gets executed without warning.

In the proof-of-concept, Raff’s code shows how a malicious hacker can use a clever social engineering lure — it requires two mouse clicks — to plant malware on Windows desktops.

The Google Chrome user-agent shows that Chrome is actually WebKit 525.13 (Safari 3.1), which is an outdated/vulnerable version of that browser.

Apple patched the carpet-bombing issue with Safari v3.1.2.

Some Google Chrome early adopters using Windows Vista are reporting that files downloaded from the Internet are automatically dropped on the desktop, setting up a scenario where a combo-attack using this unpatched IE flaw could be used in attacks.

---

quote:

---

Google on Chrome EULA controversy: our bad, we'll change it

Google's new web browser Chrome is fast, shiny, and requires users to sign their very lives over to Google before they can use it. Today's Internet outrage du jour has been Chrome's EULA, which appears to give Google a nonexclusive right to display and distribute every bit of content transmitted through the browser. Now, Google tells Ars that it's a mistake, the EULA will be corrected, and the correction will be retroactive.

As noted by an attorney at Tap the Hive and various and sundry other sites, the Chrome EULA reads like a lot of Google's other EULAs. It requires users to "give Google a perpetual, irrevocable, worldwide, royalty-free, and nonexclusive license to reproduce, adapt, modify, translate, publish, publicly perform, publicly display and distribute any Content which you submit, post or display on or through, the Services."

Google's Rebecca Ward, Senior Product Counsel for Google Chrome, now tells Ars Technica that the company tries to reuse these licenses as much as possible, "in order to keep things simple for our users." Ward admits that sometimes "this means that the legal terms for a specific product may include terms that don't apply well to the use of that product" and says that Google is "working quickly to remove language from Section 11 of the current Google Chrome terms of service. This change will apply retroactively to all users who have downloaded Google Chrome."

It's worth noting that the EULA is largely unenforceable because the source code of Chrome is distributed under an open license. Users could simply download the source code, compile it themselves, and use it without having to agree to Google's EULA. The terms of the BSD license under which the source code is distributed are highly permissive and impose virtually no conditions or requirements on end users.

So, there you have it: a tempest in a (chrome) teapot. Not that it's the only one; as Ina Fried of News.com points out, Chrome's "Omnibar" can also access all keystrokes a user types, and Google will store some of this information along with IP addresses.

---

The Register's 'Hal-Chrome' Logo

quote:

---

Astute Reg readers have pointed out a Chrome condition of service that effectively lets Google use any of your copyrighted material posted to the web via Chrome without paying you a cent.

...the relevant section 11.1 of the Chrome EULA...

But you may be posting material via Chrome to your employer's site and it owns the copyright of anything you create in work time. What then if Google adapts, modifies and distributes it? Your fan has brown stuff all over it but none of it sticks to Google.

Copyright-sensitive sysadms may banish Chrome from their networks because of this.

---