chromebook刷机_不，您不需要Chromebook上的防病毒软件

chromebook刷机

Recently, Malwarebytes announced an antivirus for Chromebooks (through its Android app). But here’s the thing: that’s complete bullshit. You don’t need an antivirus on Chrome OS; I don’t care how they try to sell it.

最近，Malwarebytes 宣布了针对Chromebook的防病毒软件 (通过其Android应用程序)。 但这就是问题：这完全是胡说八道。 您不需要在Chrome操作系统上使用防病毒软件； 我不在乎他们如何尝试出售它。

See, Chromebooks (Note: this applies to Chrome OS in general, but for the sake of simplicity we will continue to use the term “Chromebook”) are inherently secure. That’s one of their biggest selling points—they’re impervious to viruses. To put it simply, viruses on Chrome OS don’t exist. So what’s Malwarebytes selling point? Since Chromebooks can run Android apps, they have the same vulnerabilities as Android devices.

请参阅Chromebook(注意：这通常适用于Chrome操作系统，但为简单起见，我们将继续使用“ Chromebook”一词) 本质上是安全的 。 这是他们最大的卖点之一-它们不受病毒侵害。 简而言之，Chrome操作系统上不存在病毒。 那么，Malwarebytes的卖点是什么？ 由于Chromebook可以运行Android应用，因此它们具有与Android设备相同的漏洞 。

Give me a break. That’s not even remotely true.

休息一下 事实并非如此。

为什么Chromebook不需要防病毒软件 (Why Chromebooks Don’t Need Antivirus)

Like we said earlier, there is no such thing as a virus for Chrome OS. There are several reasons for this, but the main one is because of sandboxing. Every tab you open—be those in the Chrome browser or a standalone web app—runs in a virtual sandbox. That means if the system identifies an infected page, the “infection” only exists within that tab; it has no way of making its way to the rest of the system. And when you close that tab, the sandbox is killed with it. Thus, no infection.

就像我们之前说的，Chrome OS没有病毒。 造成这种情况的原因有很多，但主要的原因是由于沙箱操作。 您打开的每个标签(无论是在Chrome浏览器中还是在独立的Web应用程序中)都在虚拟沙箱中运行。 这意味着，如果系统识别出受感染的页面，则“感染”仅存在于该选项卡中； 它无法进入系统的其余部分。 并且当您关闭该标签时，沙箱将被杀死。 因此，没有感染。

If by some wild chance a type of malware comes along that finds a way out of this sandbox, Verified Boot continues to protect the system. Every time a Chromebook starts up, it checks the integrity of the operating system. If it detects an anomaly—which means any system modification—it will repair itself. The only exception here is if you’ve enabled Developer Mode, which disables Verified Boot and allows modifications to the system. This, of course, isn’t recommended for the majority of users.

如果偶然地出现了某种恶意软件，并且找到了摆脱该沙箱的出路，那么“验证启动”将继续保护系统。 Chromebook每次启动时，都会检查操作系统的完整性。 如果检测到异常(这意味着对系统进行了任何修改)，它将自行修复。 唯一的例外是是否启用了“开发人员模式”，即禁用“验证启动”并允许对系统进行修改。 当然，不建议大多数用户使用。

Past that, Chromebooks get regular updates, bringing security fixes with each one.

除此之外，Chromebook会定期进行更新，每本都附带安全修复程序。

Malwarebytes参数 (The Malwarebytes Argument)

While admitting that Chromebooks are inherently secure, Malwarebytes also somehow claims that they “can still get infected.” This is presumably by Android apps because the version of software it’s marketing for Chromebooks is its Android app. The thing is, Android apps also run in a separate container (sandbox), so anything that happens within the Android environment can’t hurt the rest of the OS.

尽管承认Chromebook本质上是安全的，但Malwarebytes还以某种方式声称它们“仍然可以被感染”。 这大概是Android应用程序的原因，因为它为Chromebook营销的软件版本是其Android应用程序。 事实是，Android应用程序还运行在单独的容器(沙盒)中，因此Android环境中发生的任何事情都不会损害其余的OS。

So, I guess Malwarebytes’ thinking goes something like this: if there are trojans and malware on Android, you can have those same issues on Chrome OS! And while I’m ready to admit they’re not technically wrong, that also doesn’t make them right. You don’t need an antivirus on Android any more than you need one on Chrome OS. In fact, you need one even less on the latter.

因此，我猜想Malwarebytes的想法是这样的： 如果Android上存在木马和恶意软件，那么Chrome OS上可能会遇到同样的问题！ 尽管我准备承认它们在技术上没有错 ，但这也不会使它们正确。 您不需要在Android上安装杀毒软件，也不需要在Chrome OS上安装杀毒软件。 实际上，后者的需求量甚至更少。

Google does a pretty good job of keeping malware out of the Play Store by using Google Play Protect. It scans every app that comes into Google Play for potential threats, then blocks anything that throws up a red flag. It’s not a perfect system—like any similar solution, some threats still make it through, though those are uncommon.

Google通过使用Google Play Protect 很好地阻止了恶意软件进入Play商店。 它会扫描进入Google Play的每个应用程序是否存在潜在威胁，然后阻止所有引发危险信号的应用程序。 这不是一个完美的系统-像任何类似的解决方案一样，尽管很少见，但仍有一些威胁能够通过。

And really, when it comes to Android viruses/trojans/malware, there’s a common thread: third-party app stores. More often than not, users are getting malicious apps from unmonitored app stores or even ones that promote piracy by offering paid apps for free—those types of stores are just asking for trouble. You know, the kind that uses legitimate apps like PayPal to steal money from you.  The bad stuff.

实际上，当涉及到Android病毒/特洛伊木马/恶意软件时，有一个共同点：第三方应用商店。 用户通常会从不受监视的应用商店中获得恶意应用，甚至通过免费提供付费应用来获取盗版行为，而这些应用只是在问麻烦。 您知道，这种使用PayPal之类的合法应用从您那里窃取金钱的人 。 坏东西。

All that is to say one thing: if you don’t use third-party app stores on your Chromebook (or Android device!), guess what? There’s a very small chance you’ll ever need an antivirus. Very small. To make matters even simpler, you can’t install third-party app stores (or any other application) on a Chromebook without first enabling Developer Mode—sideloading of applications is blocked by default on Chrome OS for security purposes. In other words, Chromebooks are inherently protected against most Android threats by default, and it takes quite a bit of additional work before you can bypass this protection.

这就是说一件事：如果您不使用Chromebook(或Android设备！)上的第三方应用商店，您猜怎么着？ 您极有可能需要防病毒软件。 很小。 为了使事情变得更加简单，您必须先启用开发者模式才能在Chromebook上安装第三方应用商店(或任何其他应用程序)，出于安全目的，默认情况下，Chrome OS禁止应用程序的侧面加载。 换句话说，默认情况下，Chromebook固有地受到大多数Android威胁的保护，要绕过此保护，还需要进行大量额外工作。

好吧，那么，恶意软件字节在Chrome操作系统上是否有作用？ (Okay, So Does Malwarebytes Do Anything on Chrome OS?)

Well, yes and no. It does offer “virus protection” that scans every new Android app installed for any malicious intent. But that’s what pretty much every antivirus on Android does. The good news is that Malwarebytes at least detected the test virus I installed from Google Play to verify it worked.

好吧，是的，不是。 它确实提供了“病毒防护”功能，可扫描安装的每个新Android应用程序是否存在任何恶意意图。 但这几乎是Android上每个防病毒软件都可以执行的操作。 好消息是，Malwarebytes至少检测到我从Google Play安装的测试病毒，以验证它是否有效。

Beyond that, Malwarebytes offers a “security audit” that checks your device’s settings for any potential security risks—all of which are Android related.

除此之外，Malwarebytes还提供“安全审核”，可检查您设备的设置是否存在任何潜在的安全风险-所有这些都与Android有关。

For example, it will let you know if you have Developer Options enabled in the Android settings menu on your Chromebook, but it won’t alert you if your device is in Developer Mode which is a far more insecure setting on Chrome OS machines because it effectively disables most of Chrome OS’ biggest security features. Why? Because it’s running in a sandbox that can’t see the rest of the operating system!

例如，它会通知您是否在Chromebook的Android设置菜单中启用了开发人员选项，但不会提醒您设备是否处于开发人员模式，这在Chrome操作系统的计算机上是更加不安全的设置，因为有效地禁用了Chrome OS的大多数最大安全功能。 为什么？ 因为它在无法查看其余操作系统的沙箱中运行！

Similarly, it will tell you that your device has “unsecured Android settings” if you’re not using a PIN, Pattern, or Password—options that aren’t even available in Android’s settings on Chromebooks because Chrome OS itself handles those things. But again, Malwarebytes can’t see that, because it’s an Android app and runs in a separate container, segregated from the rest of the operating system.

同样，如果您不使用PIN，Pattern或Password，那么它会告诉您设备具有“不安全的Android设置”，这些选项在Chromebook的Android设置中甚至不可用，因为Chrome OS本身可以处理这些事情。 但同样，Malwarebytes看不到这一点，因为它是一个Android应用程序，运行在与其他操作系统隔离的单独容器中。

Plus, it’s just funny that it shows trivial settings like “Device encryption” and “Google Play Protect,” both of which are enabled by default on all Android devices and Chromebooks. Hell, encryption can’t even be disabled on modern devices. It’s just placebo bullshit.

另外，它显示了“设备加密”和“ Google Play保护”之类的微不足道的设置，这很有趣，在所有Android设备和Chromebook上默认都启用了这两项设置。 糟糕，加密甚至无法在现代设备上禁用。 这只是安慰废话。

如何确保Chromebook的安全 (How to Stay Safe on Your Chromebook)

As we’ve already established, Chromebooks are pretty dang secure right out of the box, so it’s not that difficult to keep your ‘book safe. Still, we have a guide on making sure your Chromebook is as secure as possible.

正如我们已经建立了，Chromebook是一款箱子的漂亮宕安全右出，所以它并不难 ，让您的书是安全的。 不过，我们仍然提供有关确保Chromebook尽可能安全的指南。

Outside of the options found in that article, the same rules apply here as on Android, especially when it comes to malware:

除了该文章中提供的选项之外，此处适用与Android相同的规则，尤其是在涉及恶意软件时：

• Be smart. Just pay attention to what you’re installing. Google Play Protect does a good job of keeping most malware out of the Play Store, but as I said earlier, some things do get through. So make sure the app you’re installing is legit—read the comments, check the developer, etc.

  放聪明点。 只要注意您要安装的内容即可。 Google Play Protect很好地将大多数恶意软件拒之门外，但正如我之前所说，某些事情确实可以解决。 因此，请确保您要安装的应用是合法的-阅读评论，检查开发人员等。

• Keep Developer Mode disabled. Most users have no reason to ever enable Developer Mode on their Chromebooks, but if you happen to run across a reason to consider it, think long and hard before you make that leap—this will dramatically decrease your Chromebook’s security.

  保持禁用开发人员模式。 大多数用户没有理由在其Chromebook上启用“开发人员模式”，但是如果碰巧需要考虑使用它，请在进行这一飞跃之前三思而行，这会大大降低Chromebook的安全性。

• Keep your Chromebook updated. If you get an update, install it. It’s that simple.

  保持您的Chromebook更新。 如果有更新，请安装它。 就这么简单。

---

---

While an antivirus app on a Chromebook may sound like a good idea, it’s just unnecessary. But the good news is that if you insist on using one, it’s probably not going to hurt anything. Sometimes I guess that security blanket is just an unfortunate must.

虽然Chromebook上的防病毒应用听起来不错，但这是不必要的。 但是好消息是，如果您坚持使用它，那可能不会伤到任何东西。 有时我想安全毯只是不幸的必须。

翻译自: https://www.howtogeek.com/398481/no-you-dont-need-antivirus-on-a-chromebook/

chromebook刷机