3 ms·
> we have a strict subset of Chrome extensions allowed for install. All of which have been vetted by our security team. How do you handle a situation like this
by JimDabell 6y ago
> we have a strict subset of Chrome extensions allowed for install. All of which have been vetted by our security team.
How do you handle a situation like this, where an extension was previously trusted (and would therefore have passed your vetting procedure), then acquired by somebody else who is apparently malicious? Do you review every new version?
- jannes 6y agoI think that’s what he was getting at when he said: > Most allowed are owned by large companies. He was implying that big companies are not in the business of selling their extensions. Smaller actors are more susceptible to this.