Computers - Software Hardware : Adware vendors buy Chrome Extensions to send ad- and malware-filled updates

Donate

Please support destee.com, the oldest, most respectful, online black community in the world - PayPal or CashApp - Thank you.

Gorilla

Well-Known Member
REGISTERED MEMBER
Jan 31, 2009
2,450
1,372
One of the coolest things about Chrome is the silent, automatic updates that always ensure that users are always running the latest version. While Chrome itself is updated automatically by Google, that update process also includes Chrome's extensions, which are updated by the extension owners. This means that it's up to the user to decide if the owner of an extension is trustworthy or not, since you are basically giving them permission to push new code out to your browser whenever they feel like it.

To make matters worse, ownership of a Chrome extension can be transferred to another party, and users are never informed when an ownership change happens. Malware and adware vendors have caught wind of this and have started showing up at the doors of extension authors, looking to buy their extensions. Once the deal is done and the ownership of the extension is transferred, the new owners can issue an ad-filled update over Chrome's update service, which sends the adware out to every user of that extension.

We ought to clarify here that Google isn't explicitly responsible for such unwanted adware, but vendors are exploiting Google's extension system to create a subpar—and possibly dangerous—browsing experience. Ars has contacted Google for comment, but we haven't heard back yet. We'll update this article if we do.


Source: http://arstechnica.com/security/201...me-extensions-to-send-adware-filled-updates/?
 

Latest profile posts

Hi! I'm not as active on this account as I want to be. For one I tend to forget that this site exists until I check my email. Two, I'm currently in the process of building up a fine art site for Oklahoma black and native historical references. The references correlate with another site that will be a storytelling site that has not yet been produced.
Happy to be back and gaining more knowledge!
Destee wrote on Cindy's profile.
Welcome Home Beloved! :wave: :love:
skuderjaymes wrote on Cindy's profile.
good to see you around Cindy.
2022 Has started and I hope everyone is having a safe and protected journey as we navigate this game of life
during this pandemic. We are not easily defeated so protect your momentum at all times. One Love.
Top