3 ms·
The issue with browser extensions is that the main way to monetize them is to steal data or inject adware/malware[1]. The extensions themselves request a lot of
by twunde 4y ago
The issue with browser extensions is that the main way to monetize them is to steal data or inject adware/malware[1]. The extensions themselves request a lot of permissions, there's minimal security scanning (the only one I know of is https://crxcavator.io/ https://crxcavator.io/) and often people with successful browser extensions end up selling them to someone who then modifies them to be malicious[2], which means even trustworthy extensions may become malicious at any point. That said, no ublock is not the only safe add-on. The ones you mentioned are safe, but there's probably not enough people asking security/IT about them. What might be an effective approach to get your preferred extensions added to the allowlist is to request the process to add new extensions to that list, and to point them to the risk scores in https://crxcavator.io/ https://crxcavator.io/
[1] https://www.tomsguide.com/news/28-bad-browser-extensions https://www.tomsguide.com/news/28-bad-browser-extensions
[2] https://www.labnol.org/internet/sold-chrome-extension/28377/ https://www.labnol.org/internet/sold-chrome-extension/28377/