Peterborough Linux User Group (Canada) Forum

Linux & Android => Security and Privacy => Topic started by: ssfc72 on June 18, 2020, 02:25:40 AM

Title: Spying Google Chrome Extensions, massive spying
Post by: ssfc72 on June 18, 2020, 02:25:40 AM
https://www.reuters.com/article/us-alphabet-google-chrome-exclusive/exclusive-massive-spying-on-users-of-googles-chrome-shows-new-security-weakness-idUSKBN23P0JO

Nasty spying by many Google Chrome extensions.
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: fox on June 18, 2020, 08:01:49 AM
Just curious. Would these be Chromium extensions as well?
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: ssfc72 on June 18, 2020, 01:41:54 PM
Jason would probably know about Chromium.  I would think Chromium would use the same browser extensions that Chrome uses, so the spying extensions probably affect Chromium.
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: ssfc72 on June 20, 2020, 09:33:30 AM
Google has removed 106 Chrome Extensions that were collecting sensitive data.
https://boingboing.net/2020/06/19/google-removes-106-malicious-c.html
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: Jason on June 21, 2020, 03:01:19 AM
Quote from: ssfc72 on June 18, 2020, 01:41:54 PM
Jason would probably know about Chromium.  I would think Chromium would use the same browser extensions that Chrome uses, so the spying extensions probably affect Chromium.


Yes. Chromium does. As do any browsers based on Chromium that choose to do so. For example, I believe Opera which uses Chromium as a base, has access to Chrome extensions.
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: ssfc72 on June 21, 2020, 04:08:04 AM
I have 4 Extensions on my Opera browser. Only 2 of them are enabled.
Save To Pocket is one extension that I do not have enabled.  I just did a search for it, in the Extensions and it is no longer listed.  It may have been one of the Extensions Google deleted or it just may be no longer supported by the developer?

So anyone who uses a browser that is Chromium based, may want to go into the Extensions and check to see if the Extensions you are using, are still listed as available.
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: fox on June 21, 2020, 07:11:52 AM
I use Save to Pocket, but on Firefox, not Chrome. Is this an extension I should worry about?
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: ssfc72 on June 21, 2020, 09:21:08 AM
My guess would be that  Firefox is ok.  The article just mentions the Chrome browser and Extensions.
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: Jason on June 22, 2020, 12:30:39 AM
Quote from: ssfc72 on June 21, 2020, 04:08:04 AM
I have 4 Extensions on my Opera browser. Only 2 of them are enabled.
Save To Pocket is one extension that I do not have enabled.  I just did a search for it, in the Extensions and it is no longer listed.  It may have been one of the Extensions Google deleted or it just may be no longer supported by the developer?

https://chrome.google.com/webstore/detail/save-to-pocket/niloccemoadcdkdjlinkgdfekeahmflj (https://chrome.google.com/webstore/detail/save-to-pocket/niloccemoadcdkdjlinkgdfekeahmflj)
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: Jason on June 22, 2020, 12:32:27 AM
Quote from: fox on June 21, 2020, 07:11:52 AM
I use Save to Pocket, but on Firefox, not Chrome. Is this an extension I should worry about?

Isn't it built into Firefox? Okay, it looks like it is, but you can disable it (https://support.mozilla.org/en-US/kb/disable-or-re-enable-pocket-for-firefox). But I wouldn't worry about. Firefox extensions are built differently. Not to say that you couldn't have malware in Firefox extensions (https://www.zdnet.com/article/mozilla-has-banned-nearly-200-malicious-firefox-add-ons-over-the-last-two-weeks/).
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: Jason on June 23, 2020, 02:53:03 AM
I should have asked first if Opera uses extensions from the Chrome Web Store. I thought it did but maybe not, Bill?
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: ssfc72 on June 23, 2020, 07:14:12 AM
The Opera Extensions are located on the Opera website.
Title: Re: Spying Google Chrome Extensions, massive spying
Post by: Jason on June 23, 2020, 05:21:42 PM
Quote from: ssfc72 on June 23, 2020, 07:14:12 AM
The Opera Extensions are located on the Opera website.

Are they Chrome extensions though like maybe a chosen selection of them? You noted that 'Save to Pocket' wasn't available as an extension anymore and you postulated that Google or the developer had removed it. That's why I wondered if Opera was using the Chrome store now.

Anyway, I found it here (https://addons.opera.com/en/extensions/details/pocket-formerly-read-it-later/) in the Opera extensions so they must have put it back. Weird.