Take the 2-minute tour ×
Web Applications Stack Exchange is a question and answer site for power users of web applications. It's 100% free, no registration required.

I'd like to install a Google Chrome extension (in particular, StayFocused) and it warns me that it will have access to my data on all websites.

I find this quite scary as I'd like to keep some secure data visible to only those websites it belongs to.

Is it safe to install such an extension? What are the potential risks? I don't know if I'm missing the point of why they need access to such data.

share|improve this question
    
I wish there was a way to test extensions security. I want to install Download Master ( chrome.google.com/webstore/detail/… ) but I am too worried about security. –  user15765 Dec 22 '11 at 15:59

2 Answers 2

up vote 6 down vote accepted

The whole point about the warning is to give you an informed choice about whether you should install the extension. Presumably some (most?) people don't realise that browser extensions might do more than what the maker tells you they will do.

In theory a malicious extension could, for want of a better word, snoop on your banking/credit card payment/Facebook password... and somehow pass it to an evil hacker. No different really to installing any software on your computer.

How one decides to trust a particular application is pretty complicated. You trusted Google enough to install their browser, why was that?

Was it...

  • Privacy policy
  • Reputation
  • Terms of Use
  • Your knowledge of the laws & regulations of your/their country
  • Reviews & Ratings
  • Some other reason(s)

Should you trust this particular extension and go ahead and install it?
My humble suggestion would be to apply the same reasoning that you used when you installed Chrome or any other application, the fact that it is an extension for Chrome is irrelevant.

share|improve this answer
    
Well, it was reputation first - I don't believe Google can use my credit card number, though they definitely have the ability to steal it :) I like your arguments and I agree with it basically, so your answer it accepted. Thanks! –  Yan Sklyarenko Oct 18 '10 at 8:28

I found this thread which explains it quite thoroughly:

http://productforums.google.com/d/topic/chrome/Bn9dWCmVtUs/discussion

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.