Inside the Google Chrome OS security model
http://blogs.zdnet.com/security/?p=4969