3 ms·
I am more concerned about the security implications. No work environment should be allowing use of non-business critical extensions which tamper with web conten
by ocdtrekkie 5y ago
I am more concerned about the security implications. No work environment should be allowing use of non-business critical extensions which tamper with web content.
(PS. If you work anywhere that allows arbitrary Chrome extensions, I hope your cyber incident insurance is up to date!)
Browser extensions have incredibly privileged access to your post-decryption web content, and if you can install cloud-to-butt, you should assume your environment is already compromised.
- jnwatson 5y agoOn my managed Chromebook, I can install Chrome Extensions, but all but approved extensions work on intranet pages.
- ocdtrekkie 5y agoMy significant concern would remain in this configuration that if anyone in your organization views or enters sensitive or personal information into non-intranet pages, that that information would still be subject to easy compromise. What about internal services or tools hosted by cloud providers? Bear in mind, a malicious cloud-to-butt Chrome extension could even replace the download URLs on trusted websites to download content from malicious sites when you click them.