Browser extensions have become a critical attack vector, especially since many of them require access to all sites. Some malicious extensions were able to read passwords as you type them in or mine cryptocurrency in the background before Google removed them. Google has implemented several new changes for extensions over the past few months, and new ones will come into effect this October.
The first new requirement is that extensions can only request access "to the least amount of data." For example, if someone made an extension that changed how Android Police looks, it could only request access to androidpolice.com and not all sites.
Read MoreGoogle sets new privacy standards for Chrome extensions, but will they be enforced? was written by the awesome team at Android Police.
from Android Police – Android news, reviews, apps, games, phones, tablets http://bit.ly/2y6tyDx
No comments:
Post a Comment