Google Introduces New Safety Measures To Fight Cryptojacking
The tech giant is set to deregister a number of extensions that go against new policies
Google Bans Obfuscated Extensions
Tech giant Google has revealed plans to ban browser extensions that have the capability to tamper with users digital assets. In a press release, Google announced that in the coming days, the firm will roll out additional privacy features on the chrome browser. The features will be activated when a user is adding an extension to his browser.
Apart from banning malicious add-ons, Google is set to remove already established extensions with mining scripts from the chrome browser. Google added that its main goal is to detect such extensions at the installation level and block them. The new privacy features will be under the release of out of process iframes. The new features will be powered by machine learning.
By the time Google made the announcement, Chrome Web Store has been permitting the addition of crypto mining adds on. Developers are only required to adhere to laid down policy guidelines as highlighted by the company. The policy wants users notified about the mining script in use.
The announcement comes just four months after Google revealed that the majority of extensions with mining scripts did not meet the policy threshold. Through a blog post, Google said that about 90% of new extensions were affected.
Prior to the latest announcement, the tech firm stated that in the recent months, there was an increase in the number of malicious extensions for the mining sector. Google said that the extensions were designed to take over user digital assets unknowingly. This development has been cited as the main reason why Google took the drastic measure to ban malicious extensions. Even extensions that will show the slightest sign of any risk will be banned.
Google Latest Safety Measure
Among the upcoming changes, we have user controls for host permits. For the first time, users will be in a position to customize their extensions to ask for a lock before accessing the present page.
Google has also made changes on how to review extensions. Before being enlisted on the web store, extensions will have to undergo extra compliance checks.
Google will also be making changes to code requirements for new extensions. Any extension with an obfuscated code will be blocked instantly. These requirements will affect even extensions already published on the website. Running extensions will be removed within 90 days.
Lastly, Google will be implementing the two-step verification feature. This requirement will take place next year when all submissions will be subjected to the two-step authentication process as a way of coming up with an additional safety net. Furthermore, web store policies are expected to greatly change with the addition of Manifest v3 in 2019