Google Chrome Extensions: Security

Adam Barth, a researcher working on the extensions system for Google Chrome, discusses how the extension system makes it easier for developers to create secure extensions. Google Chrome's extension security architecture is based on two principles: least privilege and privilege separation. Both of these principles limit the amount of privileges an attacker has access to if they are able to find a vulnerability in an existing extension. Visit code.google.com/chrome/extensions for more information

Category:

Science & Technology

Tags:

• chrome
• extensions
• security
• privileges
• least privilege
• privilege separation
• background page
• content script
• vulnerability
• cross-site scripting
• XSS
• addons
• add-ons

[hitman7112]

Google is the best!

[DartGreene]

With Regards to security Google has the best feature.

[naturesuphoria]

Great videos! R u a fan of Hair Extensions? We have some great videos about seamless ahir extensions.

[htmlmm]

Least privilege... the thing Microsoft never understood... and with them, their users.

[iToasterman]

@darthirakli install extentions XD

[labobo]

@darthirakli you have to get your OCD satisfaction somewhere else ;)

[Watamatakiki]

my problem is all google chrome add-ons for blocking ads suck compared to firefox's adblock plus. and as far as i no it doesn't have noscript and if you want keyscrambler then you have to pay the last time i checked. out of the box chrome might be more secure but i think even though firefox needs add-ons to make it more secure it still beats chrome security whether chrome has add-ons or not once firefox has the right add-ons.

[Menace1979]

Chrome is secure?

Fucking joke!

[theAntilli]

@darthirakli In what way? Obviously the set of options is small under 'settings'- But then, WebKit and Chromium are OpenSource, so i would have thought one can do what one wants..

[AestheticFlavor]

@darthirakli: Ahhh, but see, that's what makes a browser, slower. The less add-ons/extensions, the better. I just downloaded Google Chrome, today. And I must say, it is a bit faster than Mozilla's Firefox; even while downloading files.

[cakelover33]

@darthirakli it has just as much as any other browsers. except toolbars. but i dont like them on my browser. u can put themes extensions just liek firefox.