Mailing List Archive: Is Google intending to bypass Microsoft application registration?

Is Google intending to bypass Microsoft application registration?

Jason.Haar at trimble

Sep 4, 2008, 3:53 PM

Post #1 of 6 (3531 views)

Hi there

As most of you know, Google released Chrome this week. We were wondering
how fast our software engineers would pick it up, so we went to our
latest Nessus report to see who had already installed it: answer zero.

Strange that - as I had it installed for starters! Ends up Google
doesn't register the app under
HKLM/SOFTWARE/Microsoft/Windows/CurrentVersion/Uninstall like you're
meant to. However, Google also has that "Google Update Service" - so I'm
beginning to wonder if they intend to bypass the "standard" application
management APIs and do it their own way for all their apps! :-(

And then the extension to that is - who else will do the same thing too?

Am I being paranoid, or will it be that software asset management
systems (and nessus) will be able to track less and less going forward?

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

Re: Is Google intending to bypass Microsoft application registration? [ In reply to ]

theall at tenablesecurity

Sep 4, 2008, 5:57 PM

Post #2 of 6 (3405 views)

On Sep 4, 2008, at 6:53 PM, Jason Haar wrote:

> As most of you know, Google released Chrome this week. We were
> wondering
> how fast our software engineers would pick it up, so we went to our
> latest Nessus report to see who had already installed it: answer zero.

We should have a dedicated detection plugin shortly, once we determine
the best way to get the version info.

George
--
theall@tenablesecurity.com

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

Re: Is Google intending to bypass Microsoft application registration? [ In reply to ]

Jason.Haar at trimble

Sep 4, 2008, 7:01 PM

Post #3 of 6 (3416 views)

George A. Theall wrote:
> We should have a dedicated detection plugin shortly, once we determine
> the best way to get the version info.
>
Well I can help there. I'm afraid I put my foot in my mouth too early
there. Google may not be using the standard area to place details about
Chrome, but they did use a supported area -
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications

I found a few other apps in there too - so it would be mondo-good if
Nessus checked that area as well as the standard one in
smb_enum_softwares.nasl :-)

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

Re: Is Google intending to bypass Microsoft application registration? [ In reply to ]

theall at tenablesecurity

Sep 4, 2008, 7:06 PM

Post #4 of 6 (3410 views)

On Sep 4, 2008, at 10:01 PM, Jason Haar wrote:

> Well I can help there. I'm afraid I put my foot in my mouth too
> early there. Google may not be using the standard area to place
> details about Chrome, but they did use a supported area -
> HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications

That doesn't have the version info.

> I found a few other apps in there too - so it would be mondo-good if
> Nessus checked that area as well as the standard one in
> smb_enum_softwares.nasl :-)

Other than Google Chrome, which other apps do you see in this area
that aren't picked up by smb_enum_softwares.nasl?

George
--
theall@tenablesecurity.com

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

Re: Is Google intending to bypass Microsoft application registration? [ In reply to ]

Jason.Haar at trimble

Sep 4, 2008, 7:25 PM

Post #5 of 6 (3409 views)

George A. Theall wrote:
> Other than Google Chrome, which other apps do you see in this area
> that aren't picked up by smb_enum_softwares.nasl?
>
Well that's a way too broad a question for me to answer. I don't even
really use Windows, and I see "Firefox", "Chrome", "Microsoft Outlook"
in mine, and a colleague who runs Vista has "iTunes", "Internet
Explorer", "Quicktime", and a bunch of "Windows*" apps.

We're in a chicken-and-egg situation here. I really need nessus to
support looking there for me to tell you what is there ;-)

PS: speaking of Vista - any idea when we'll start being able to see
smb_enum_services.nasl working for Vista?

Thanks!

--
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1

_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

Re: Is Google intending to bypass Microsoft application registration? [ In reply to ]

npouvesle at tenablesecurity

Sep 8, 2008, 7:26 AM

Post #6 of 6 (3377 views)

On Sep 5, 2008, at 4:25 AM, Jason Haar wrote:
>
>
> PS: speaking of Vista - any idea when we'll start being able to see
> smb_enum_services.nasl working for Vista?

Thanks for reporting this issue. It is now fixed !

Nicolas
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus