Page 1 of 1
Extensions and privacy
Posted: Tue May 15, 2012 10:27 am
by irondude
i have moved from Chrome to SRware Iron for privacy reasons.
Does this mean, to keep my privacy secure, I also need to not install any chrome extensions into Srware iron ?
What are the privacy implications of installing Chrome extensions on iron ?
If the answer depends on factors, what do i need to check to see if it is compromises my privacy or not?
thanks in advance
Re: Extensions and privacy
Posted: Tue May 15, 2012 11:42 am
by mapx
you can install the extensions without worrying about privacy
Re: Extensions and privacy
Posted: Tue May 15, 2012 1:02 pm
by irondude
even if its from the chrome store?
Re: Extensions and privacy
Posted: Tue May 15, 2012 2:48 pm
by bksening
Unfortunately, mapx, you are wrong. Iron browser itself offers no extra privacy protection from third party extensions. It just allows the same extension capabilities as built-in to Chromium. This applies to extensions from Chrome webstore, Iron extensions library, or any other site or third-party.
In general, extensions are written by third-party authors. They can do anything the extensions system allows them to do, including copying and sending offsite to other locations any info which you may give permission for the extension to access. Do you know exactly all the permissions your extensions run with? Do you understand the full implications of what those permissions could allow the extension to do? Not every extension will send your private data away, but you won't know if they do or not just by installing and running them.
In general, to keep your privacy secure, you cannot install any extensions at all. Or, you need to download/install the extension, read through all the extension source files from its install directory and see exactly what it is doing. Or, you can put your faith in nebulous unknown party forum contributors if they generally agree that so-and-so extension is safe or not. Or else, you are just shooting in the dark.
Re: Extensions and privacy
Posted: Tue May 15, 2012 3:38 pm
by mapx
even.
it is only a store.
eventually dont use google extensions (made by them) if you want to be sure 100%
Re: Extensions and privacy
Posted: Sat May 19, 2012 8:14 pm
by oki88
100% sure about what?
The fact the Google wrote it means that it can add tracking functions, as it always does. That's the reason why we use Iron and not Chrome, isn't it?...
Extensions may track your browsing habits without revealing you anything. Moreover, even if you used to use some extension and you know it's safe, it doesn't mean that tomorrow it will not suddenly start its snooping activities. Why? It's because of auto-updating mechanism embedded into Chromium (the obvious security problem, created by design). Unless you manually change in
Preferences file update URL for that extension to
"update_url": "http://127.0.0.1" you'll never know when it could be updated and change its behavior. Good example (of bad things happened) is "Smooth Gestures" extension. At some point of time my installed v0.14.5 was updated to a new version that start spying on me... See e.g. this thread, discussing that issue:
http://www.reddit.com/r/chrome/comments ... me_beware/
Bottom line - extensions are always potential threat to anyone's privacy. Install only those, that you know don't do it and then block auto-updating mechanism to be sure that its not replaced with something you don't want...