9

Should I ever be worried about installing any chrome extension from the Chrome store?

A lot of the Chrome extensions I have, have the permission "Read and change all your data on the websites you visit" - now that sounds fairly open ended permission that you can do a lot of damage with that (read through my emails, go into my internet banking?).

Can I trust a chrome extension to not secretly do malicious activities in the background? If so, why should I be able to trust these extensions? Is the Chrome store curated by Google?

8

Can I trust a chrome extension to not secretly do malicious activities in the background? If so, why should I be able to trust these extensions? Is the Chrome store curated by Google?

You cannot fully trust the chrome store. For examples of malicious behavior see Uncovering Malicious Browser Extensions in Chrome Web Store from 09/2014, Adware vendors buy Chrome Extensions to send ad- and malware-filled updates from 01/2014 or Can you trust your browser extensions? Exploring an ad-injecting chrome extension from 10/2014.

The idea is often the same: gain some initial trust by being a well behaved extension and later turn bad.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.