tk Computer Service

Web Browser Tips & Tricks

Google Chrome : Enable the Strict Site Isolation Option (enable-site-per-process)

In this video I will show you how I enable Google Chrome's Strict Site Isolation Option, also known as the Site Per Process Option. This is an experimental feature in Google Chrome and may have some adverse affects in certain use-case scenarios, which I do my best to describe later in this video. I would do this on any type of Computer Hardware that has Google Chrome installed on it, Mac, Windows, Smart-phones or All-in-ones. The reason for doing this is the recent disclosure of the exploits Meltdown and Spectre. This will only help protect Information while using Chrome and only against variant 1 of Spectre.
In order to turn the Feature on:
Open Google Chrome on whatever Device it is installed on and in the Address Bar type: chrome://flags then press the Enter Key.
Once that Page has opened, goto to the Customize and Control Google Chrome Button or Menu in the top left corner of the Browser, (select) it …then (select) Find or Find in Page if on an Android Device.
In the Search Box type the word: Isolation
You should now see all the options that contain the word "Isolation" highlighted.
Goto the one with the Heading of "Strict Site Isolation" and click the Link at the bottom of the Option Description that now reads "Enable" so that it is changed to "Disable". There-by enabling the Option, ofcourse.
Right above the "Disable" link that I changed from "Enable" is a Link the reads "#enable-site-per-process", right-click it and choose "Copy Link Address" You can use this after Chrome re-starts to quickly double-check the Setting to make sure it's set as desired.
You will notice that Google Chrome will pop-up an Action Button at the bottom of the Browser asking you to "Relaunch Now" in order for the changes to take affect. Click it.
Once the Web Browser has re-started go back to the Address Bar and paste-in the Link that was copied and make sure it was applied properly. Again, I'd do this on any Device running Google Chrome and do my Web Surfing in Google Chrome until the Hardware Companies, i.e. Intel, AMD and ARM can roll-out patches to third-party Vendors such as Dell, HP and so forth.
With that said, if a Computer is running the Windows 10 Creators Update Operating System (1703 or 1709) and it has been patched with the KB4056891 or KB4056892 Patches, to my understanding you should be OK to Browse with Microsoft's Edge Browser with a similar mitigation as "Per Site Isolation" with added mitigation to the way the Kernel of the Operating System handles Data. Which should give you further protection from all variants of Spectre and Meltdown.
These are mere mitigations not fixes, the fixes will have to come from the Hardware Vendors. These mitigations also, come with a Performance Price. Now as far as turning-on Site Isolation in Chrome, it has a couple of caveats: Certain Developer Features will be hindered or un-available with it running, some i-Frames may not print when printing a Web Page and there will be a Browsing Performance Hit across the board. A small Price to pay, in my opinion.
There have, also, been reports of the Patches released from Microsoft not Installing properly and\or having conflicts with certain third-party Anti-virus Solutions.
I have updated Windows 10 Creators Update version 1703 running only Windows Defender AV with no issues and very little performance degradation.
What to do after all this? Keep and eye on your Computer's Manufacturer's Website for BIOS or other Firmware Updates, as these will likely be where the fixes come from.

* Requires the Google Chrome Web Browser to be installed. An Internet Connection is optional. *

page seperator

^