"Does the browser benefit from Windows Operating System features that protect against arbitrary data execution?
Does the browser benefit from Windows Operating System features that randomize the memory layout to make it harder for attackers to find their target?"
I got a checkmark on both those. Yet I'm running Mac.
I also got an "X" on "Does the browser help protect you from websites that are known to distribute socially engineered malware?" yet I'm running Chrome, and little do Microsoft know but Google keeps an entire db of "socially engineered malware" and disallows you to access it.
Good old Microsoft trash browser stats, just like the old IE is the safest browser one.
If you're on OS X, then yes, both features are available to you. They're called non-executable stack and ASLR. MS did the correct thing by giving you credit for those features.
Double awesome points for checkmark for windows-only features on a mac.
I BET once that is discovered the site will browser-sniff.
The "known malware" is an interesting thing. That may be pre-canned inside the browser. I rather my browser have that knowlege, and update a master list hourly, than send info to google to ask "is this ok"... IDK what chrome does so can use some citation on this info.
In fairness, running IE6 is soon going to be like running Firefox with NoScript, so it might actually be more safe, just like Lynx.
Safari for Windows isn't even recognized.
Most of the security features that were included in the score are publically documented by the browser manufacturers and the presence can be verified directly through the browser itself. Additionally, tools like the Sys Internals process expirer were used to verify the use of DEP, Protected Mode, and ASLR.
Chrome 16.0.904.0
IE7 on XP scores 1. That's something, I suppose.
