V
V
vrnd2020-02-17 15:44:58
Browsers
vrnd, 2020-02-17 15:44:58

Is the data collected by browser extensions sent to developers?

I can't find an answer to the question:
Can data collected by browser extensions be sent to developers or is it prohibited by browser policies? I suspect that they can, since the official guides are modestly silent. If not, then it's not just a security hole, it's just a sinkhole.

Answer the question

In order to leave comments, you need to log in

5 answer(s)
X
xmoonlight, 2020-02-17
@xmoonlight

A permission request is displayed when a specific extension is installed.
Further - monitor with a sniffer.
PS: now nothing is sent only if the PC is not connected to any network (but even this is not accurate!).

A
Alex, 2020-02-17
@Kozack

I don't quite understand what kind of data you are talking about. But they can. The extension code should clearly state:

  1. What resources the extension has access to. For example, to execute fetchto some server. When installing such an extension, the browser will inform you that such and such an extension requests access to such and such sites.
  2. From what resources the extension can load scripts or something else. For example, for analytics. Here, the browser will not ask the user for permission. Anyway, I didn't ask before.

The browser will not give access to some resource if it is not specified in the extension manifest.
In the extension settings, the browser shows which resources the extension requests access to. And depending on the browser, you can block it to a particular resource. Or to all resources at once.

A
Alexander, 2020-02-17
@NeiroNx

I picked one extension and sent it there, but this is not enough for any statistics. The extension "The RSS Agregator" or whatever it was called. There is a subscription to rss channels, and here is information about which channel the user is subscribed to was sent somewhere.

V
vrnd, 2020-02-18
@vrnd

Yandex and Google don't need to keep track of what you do on the site "Lovers of honey mushrooms".
In the question, I meant the collection and transfer of personal (profile) data that you enter during registration, authorization (login-password). This is strictly prohibited at the level of browser policies. I previously naively thought that this is the way it is, it turns out not. Why keyloggers, just write your own browser extension.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question