Comodo Dragon

Last updated

Comodo Dragon
Developer(s) Comodo Group
Initial release2010 [1]
Stable release
119.0.6045.200 [2]   OOjs UI icon edit-ltr-progressive.svg / 7 December 2023
Preview release 75.0.3770.100 Beta (June 20, 2019;4 years ago (2019-06-20) [3] )
Engine Blink [4]
Operating system Microsoft Windows
Platform IA-32, x86-64
Size 53.8 MB
Available inEnglish and Spanish
Type Web browser [5]
License Freeware
Website browser.comodo.com

Comodo Dragon is a freeware web browser. It is based on Chromium and is produced by Comodo Group. Sporting a similar interface to Google Chrome, Dragon does not implement Chrome's user tracking and some other potentially privacy-compromising features, replacing them with its own user tracking implementations, and provides additional security measures, such as indicating the authenticity and relative strength of a website's Secure Sockets Layer (SSL) certificate. [5] [6]

Contents

Features

Upon installation, Comodo Dragon offers the opportunity to configure either the Comodo Dragon or the user's entire computer to use Comodo's own DNS servers instead of the user's Internet service provider. [7] Comodo Dragon performs additional checks on the SSL digital certificates of secure websites, and informs users if a site's certificate may be of insufficient strength. It includes an on-demand site inspector [8] designed to determine if a site hosts malicious code. [9]

Instead of Google Updater, Comodo Dragon features its own built-in updater. If Dragon is uninstalled, users are given the option of keeping Dragon's cache and cookie files or deleting them. [10]

In addition, the following Google Chrome features are removed or disabled in Dragon: [11] [12] [13] [14]

Security issues

A Google engineer publicly disclosed a serious security vulnerability in Comodo Dragon after Comodo failed to respond to the issue within the 90 days Google provides software vendors. The advisory warns users who install Comodo Dragon that Dragon replaces their default browser, hijacks DNS settings, and disables the same-origin policy, which exposes users by allowing malicious websites to access private data. [17]

Comodo's first attempt to patch the issue was shown to be ineffective. [18] Comodo subsequently claimed the problems were fixed. [19]

Comodo license and tracking

Comodo tracks each user's time spent using the browser, its operating system, and browser inquiries about certificate revocation, which reveal the sites visited. Users can opt whether they also track activity and use it in more detail than that. [20] Comodo and its partners use cookies and Google Analytics. "Comodo may disclose data to its affiliates and business partners who have established similar privacy standards." [21]

Their privacy statement says that only in California is the IP address considered personal information. [21] Comodo creates log files which track users, identifiable by cookie or browser features (and IP address outside California): "Comodo uses log files comprising of non-personally identifiable information to ... track movements throughout the site ... and gather broad demographic information for aggregate use." [21]

The browser is supported by ads which "relate to the content of the information as part of the Product or queries made through the Product." [20] They include many other software products, each with its own license.

The license has common terms about complying with subpoenas and interception orders, against reverse engineering, copying and sub-licensing, and disclaiming warranties and liability. [20]

The license also requires disputes to be settled by arbitration in New Jersey. Users must give accurate registration information, and pay Comodo's costs " that, directly or indirectly, are based on your breach of this agreement, the information provided by you, or your infringement on the rights of a third party."

See also

Related Research Articles

<span class="mw-page-title-main">Web browser</span> Software used to navigate the internet

A web browser is an application for accessing websites and the Internet. When a user requests a web page from a particular website, the browser retrieves its files from a web server and then displays the page on the user's screen. Browsers are used on a range of devices, including desktops, laptops, tablets, and smartphones. In 2020, an estimated 4.9 billion people have used a browser. The most used browser is Google Chrome, with a 65% global market share on all devices, followed by Safari with 18%.

Xcitium, formerly known as Comodo Security Solutions, Inc., is a cybersecurity company headquartered in Bloomfield, New Jersey.

<span class="mw-page-title-main">HTTP cookie</span> Small pieces of data stored by a web browser while on a website

HTTP cookies are small blocks of data created by a web server while a user is browsing a website and placed on the user's computer or other device by the user's web browser. Cookies are placed on the device used to access a website, and more than one cookie may be placed on a user's device during a session.

A browser extension is a software module for customizing a web browser. Browsers typically allow users to install a variety of extensions, including user interface modifications, cookie management, ad blocking, and the custom scripting and styling of web pages.

<span class="mw-page-title-main">CCleaner</span> Suite of utilities for cleaning disk and operating system environment

CCleaner, developed by Piriform Software, is a utility used to clean potentially unwanted files and invalid Windows Registry entries from a computer. It is one of the longest-established system cleaners, first launched in 2004. It was originally developed for Microsoft Windows only, but in 2012, a macOS version was released. An Android version was released in 2014.

<span class="mw-page-title-main">VirusTotal</span> Cybersecurity website owned by Chronicle

VirusTotal is a website created by the Spanish security company Hispasec Sistemas. Launched in June 2004, it was acquired by Google in September 2012. The company's ownership switched in January 2018 to Chronicle, a subsidiary of Google.

<span class="mw-page-title-main">Google Chrome</span> Web browser developed by Google

Google Chrome is a cross-platform web browser developed by Google. It was first released in 2008 for Microsoft Windows, built with free software components from Apple WebKit and Mozilla Firefox. Versions were later released for Linux, macOS, iOS, and also for Android, where it is the default browser. The browser is also the main component of ChromeOS, where it serves as the platform for web applications.

<span class="mw-page-title-main">SRWare Iron</span> Chromium-based web browser developed by SRWare

SRWare Iron is a Chromium-based web browser developed by the German company SRWare. It primarily aims to eliminate usage tracking and other privacy-compromising functionality that the Google Chrome browser includes. Iron ships with certain Chromium privacy options switched on by default, it provides some additional features that distinguish it from Google Chrome.

<span class="mw-page-title-main">Comodo Internet Security</span> Internet security software suite

Comodo Internet Security (CIS) is developed and distributed by Comodo Group, a freemium Internet security suite that includes an antivirus program, personal firewall, sandbox, host-based intrusion prevention system (HIPS) and website filtering.

<span class="mw-page-title-main">Chromium (web browser)</span> Open-source web browser project

Chromium is a free and open-source web browser project, primarily developed and maintained by Google. This codebase provides the vast majority of code for the Google Chrome browser, which is proprietary software with additional features.

<span class="mw-page-title-main">Chrome Web Store</span> Googles online store for its Chrome web browser

Chrome Web Store is Google's online store for its Chrome web browser. As of 2022, Chrome Web Store hosts about 123,000 extensions and 29,000 themes.

<span class="mw-page-title-main">Genieo</span> Israeli company specializing in Mac malware

Genieo Innovation is an Israeli company, specializing in unwanted software which includes advertising and user tracking software, commonly referred to as a potentially unwanted program, adware, privacy-invasive software, grayware, or malware. They are best known for Genieo, an application of this type. They also own and operate InstallMac which distributes additional 'optional' search modifying software with other applications. In 2014, Genieo Innovation was acquired for $34 million by Somoto, another company which "bundles legitimate applications with offers for additional third party applications that may be unwanted by the user". This sector of the Israeli software industry is frequently referred to as Download Valley.

<span class="mw-page-title-main">Epic (web browser)</span> Indian Web Browser based on chromium

Epic is a proprietary privacy-centric web browser. It was developed by Hidden Reflex, a software product company founded by Alok Bhardwaj, using Chromium source code. Epic is always in private browsing mode, and exiting the browser deletes all browser data. The browser's developers claim that Google's tracking code has been removed, and that blocks other companies from tracking the user.

<span class="mw-page-title-main">Web browsing history</span> List of web pages a user has visited recently

Web browsing history refers to the list of web pages a user has visited, as well as associated metadata such as page title and time of visit. It is usually stored locally by web browsers in order to provide the user with a history list to go back to previously visited pages. It can reflect the user's interests, needs, and browsing habits.

Browser security is the application of Internet security to web browsers in order to protect networked data and computer systems from breaches of privacy or malware. Security exploits of browsers often use JavaScript, sometimes with cross-site scripting (XSS) with a secondary payload using Adobe Flash. Security exploits can also take advantage of vulnerabilities that are commonly exploited in all browsers.

SmartScreen is a cloud-based anti-phishing and anti-malware component included in several Microsoft products, including operating systems Windows 8 and later, the applications Internet Explorer, Microsoft Edge. SmartScreen intelligence is also used in the backend of Microsoft's online services such as the web app Outlook.com and Microsoft Bing search engine.

<span class="mw-page-title-main">Google Safe Browsing</span> Service that warns about malicious URLs

Google Safe Browsing is a service from Google that warns users when they attempt to navigate to a dangerous website or download dangerous files. Safe Browsing also notifies webmasters when their websites are compromised by malicious actors and helps them diagnose and resolve the problem. This protection works across Google products and is claimed to “power safer browsing experiences across the Internet”. It lists URLs for web resources that contain malware or phishing content. Browsers like Google Chrome, Safari, Firefox, Vivaldi, Brave and GNOME Web use these lists from Google Safe Browsing to check pages against potential threats. Google also provides a public API for the service.

<span class="mw-page-title-main">Comodo IceDragon</span> Web browser

Comodo IceDragon is an abandoned Firefox-based open source web browser from the Comodo Group for Microsoft Windows.

Federated Learning of Cohorts (FLoC) is a type of web tracking. It groups people into "cohorts" based on their browsing history for the purpose of interest-based advertising. FLoC was being developed as a part of Google's Privacy Sandbox initiative, which includes several other advertising-related technologies with bird-themed names. Despite "federated learning" in the name, FLoC does not utilize any federated learning.

References

  1. "Comodo Dragon Protects Online Privacy". comodo.com. 11 February 2010. Retrieved 24 January 2020.
  2. "Comodo Dragon v119.0.6045.200 32&64-bit are now available for download". 7 December 2023. Retrieved 12 December 2023.
  3. "Comodo Dragon v75.0.3770.100 32 & 64 bit Beta available for beta testing". Comodo Group . 20 June 2019. Retrieved 20 June 2019.
  4. JoWa, Product Translator, Global Moderator (2 May 2014). "Blink, since v. 28". Comodo Group, Inc. Archived from the original on 17 March 2016. Retrieved 3 August 2014.{{cite web}}: |author= has generic name (help)CS1 maint: multiple names: authors list (link)
  5. 1 2 "Dragon Internet Browser – Comodo Dragon Web Browser". Comodo Group, Inc. Retrieved 26 April 2014.
  6. Polishchuk, Polina (25 April 2014). "Comodo Dragon - Free downloads and software reviews - CNET Download.com". CNet.com. Archived from the original on 13 February 2014. Retrieved 26 April 2014.
  7. Spencer, Spanner (11 April 2014). "Four Useful Alternative Browsers Based On Google Chrome- Lifehacker Australia". Allure Media. Retrieved 26 April 2014.
  8. "Online Webpage Scanning for Malware Attacks- Web Inspector Online Scan". Comodo CA Ltd. Archived from the original on 29 April 2014. Retrieved 26 April 2014.
  9. Horton, Steve (19 April 2010). "Comodo Dragon review - PC Advisor". IDG UK. Retrieved 26 April 2014.
  10. "Comodo Dragon Review- The Secured Browser on Chromium- PC Security". PC Security. 27 March 2013. Retrieved 26 April 2014.
  11. "How is Dragon better? - Help - CD". Comodo Forum. 16 January 2011. Archived from the original on 28 July 2020. Retrieved 26 April 2014.
  12. Spencer, Spanner (7 April 2014). "Four Alternative, Useful Browsers Based On Google Chrome". Lifehacker . Retrieved 25 April 2020.
  13. How to Harden Your Browser Against Malware and Privacy Concerns Archived 15 October 2015 at the Wayback Machine , Tech Support Alert
  14. Make Your Browser More Resilient to Malwares and Privacy Concerns, Security Gladiators
  15. "View of /trunk/src/chrome/browser/google/google_url_tracker.cc". Archived from the original on 30 July 2012. Retrieved 15 November 2010.Source code comment on line 31
  16. "Google Chrome, Chromium, and Google" . Retrieved 28 January 2010.See Which Google Domain
  17. Chirgwin, Richard (2 February 2016). "Google calls out Comodo's Chromodo Chrome-knockoff as insecure crapware". The Register. Retrieved 13 November 2018.
  18. Kirk, Jeremy (3 February 2016). "Custom Web browser from Comodo poses severe security threat, researcher says". PCWorld. IDG Network. Retrieved 13 November 2018.
  19. Ghoshal, Abhimanyu (3 February 2016). "Google says Comodo's 'secure' browser isn't safe to use at all". The Next Web. Retrieved 14 November 2018.
  20. 1 2 3 "Comodo Internet Security v10.0 End User License and Subscriber Agreement" (PDF). Comodo. 15 December 2016. Retrieved 2 March 2017.
  21. 1 2 3 "Privacy Policy". Comodo. 1 July 2016. Retrieved 2 March 2017.

Further reading