Security News > 2021 > June > Google Chrome now warns you of extensions from untrusted devs

Google has added new protection capabilities for Enhanced Safe Browsing users in Chrome, warning them when installing untrusted extensions and allowing them to request more in-depth scans of downloaded files.
The Safe Browsing feature, available in Google Chrome since 2007, warns you of dangerous events when visiting malicious websites by checking URLs against a list of unsafe sites stored within Chrome.
Starting with Google Chrome 91, released last month, a new Enhanced Safe Browsing feature is rolling out to all users to alert them if they're installing an extension made by an untrusted developer.
New developers will have to build up trust over at least a few months until they will be added to Enhanced Safe Browsing's list of trusted devs. Until then, extensions they publish on the Chrome Web Store will be flagged as untrusted, and Chrome will notify users of what data the extensions can access.
While starting as untrusted even though they release extensions compliant with Google's Chrome Web Store Developer Program Policies, all will reach trusted status according to Google.
"If you choose to send the file, Chrome will upload it to Google Safe Browsing, which will scan it using its static and dynamic analysis classifiers in real-time. Uploaded files are deleted from Safe Browsing a short time after scanning."
News URL
Related news
- Google Chrome to use on-device AI to detect tech support scams (source)
- Google Chrome to block admin-level browser launches for better security (source)
- Google Chrome's Built-in Manager Lets Users Update Breached Passwords with One Click (source)
- Google Chrome to distrust Chunghwa Telecom, Netlock certificates in August (source)
- Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues (source)
- Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito (source)
- Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android (source)
- Google fixes high severity Chrome flaw with public exploit (source)
- New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch (source)
- Google patches new Chrome zero-day bug exploited in attacks (source)