Privacy

10338 readers

319 users here now

A community for Lemmy users interested in privacy

Rules:

Be civil
No spam posting
Keep posts on-topic
No trolling

founded 3 years ago

MODERATORS

iopq@lemmy.world

How do you evaluate a browser extension for privacy/security? (lemmy.world)

submitted 1 day ago by ladybugs@lemmy.world to c/privacy@lemmy.world

14 comments fedilink hide all child comments

Sorry if this is a dumb question, I'm not a tech/IT person and am very early in my privacy journey.

I was going to install a web clipper browser extension that works with a notes app I'm trying out, but the installation page says it isn't actively monitored for security by the organization behind my browser. The extension requires access to your data for all websites. However, the page also says that they don't share data with any third party and don't have access to this data themselves. What level of privacy risk am I taking on with this extension?

you are viewing a single comment's thread
view the rest of the comments

[–] neutronbumblebee@mander.xyz 3 points 1 day ago (1 children)

It's disappointing but some nation state sponsored attackers are either adopting useful addons or creating them from scratch. After they have a sufficient base of trusting users they update the addon to add spying code that activates for a group of accounts possibly targeted by geolocation. The vast majority of users are not even affected. So with that going on it's hard to be certain of an addons quality.

I'd consider where the addons are hosted. Firefox and Chrome both allow reviewing existing addon permissions so disable when not required or split into risk level profiles for personal vs work vs anon browsing.

[–] frongt@lemmy.zip 0 points 1 day ago

That mostly happens with ad injection and credential stealing. I'm sure the kind of attack you describe happens, but it's not relevant for most people.