Millions of Chrome users now have a defense against extension subversion with a new Chrome add-on called Under New Management. Developed by software developer Matt Frisbie, the extension alerts users when extensions change owners, potentially indicating a security threat.
Extensions, initially innocuous, can become harmful when sold or transferred to new owners who may modify the code to compromise user data or inject ads. This unnoticed hijacking can affect a vast number of users simultaneously.
Frisbie emphasizes that users are often unaware of ownership changes, leaving them vulnerable to compromised extensions. Under New Management provides users with notice of ownership changes, empowering them to make informed decisions about their installed software.
The Chrome Extensions platform faces challenges due to extensions’ significant power, difficulty in monetization, lack of transparency about developers, and seamless transfer of ownership. Frisbie’s extension aims to address these issues by notifying users of ownership changes, potentially preventing security breaches.
Google’s Chrome team recognizes the importance of addressing extension ownership changes and is considering implementing an official API for detecting such changes. Frisbie’s extension has prompted discussions within the Chrome team and encouraged collaboration with the W3C’s WebExtensions Community Group.
Overall, Frisbie’s initiative underscores the need for improved security measures in the Chrome Extensions ecosystem, ensuring users can trust the extensions they install and minimizing the risk of malicious activity.
