Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

When i install Google chrome extensions "Page Speed " it is saying that it can access all the data in my computer and can access all data of websites am visiting.

Is it a threat?

Can this extension or addon can get all data or username and password that i am using.

These type of addons of mozilla or chrome have any type of security threat

share|improve this question

migrated from stackoverflow.com Sep 29 '11 at 15:19

This question came from our site for professional and enthusiast programmers.

2 Answers 2

up vote 4 down vote accepted

It's usually safe. You shouldn't install extensions from unreliable sources though.

Chrome restricts extensions from using potentially powerful features, unless the extension has explicitly requested the permissions in a file called manifest.json. Many features are grouped, and permissions for a specific function cannot be requested without getting the whole pack of functions (for that group). Hence many extensions need "Access to all browser data" (or something similar).

See here for a full list of permissions.

share|improve this answer
    
+1 Key point here is to look at the link @Rob has provided and understand it. Also, here is a more user-friendly (as opposed to dev-friendly) description of permissions. –  Alasdair Sep 29 '11 at 7:53

Alternatively, you could install the extension (possibly in a VM), navigate to chrome://extensions/, enable "Developer mode". This will enable an "Inspect popup" menu option and allow you to browse the source code. Best of luck.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.