Mozilla drops top security tools over snooping fears
Avast and AVG extensions found collecting additional user data
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Mozilla has removed fourFirefox extensionscreated by Avast and its subsidiary AVG after receiving credible reports that the extensions had harvested user data as well as user’s browsing histories.
The four extensions which have been removed are Avast Online Security, AVG Online Security, Avast SafePrice and AVG SafePrice. The first two display warnings when users navigate to known malicious or suspicious sites while the other two show price comparisons and deals for online shoppers.
The fact that the extensions were collecting much more data than required was discovered byAdBlock Plus' creator Wladimir Palant who sent a report to Mozilla informing the Firefox maker of his discovery.
After analyzing the Avast Online Security and AVG Online Security extensions last month, Palant found that they were both collecting additional data including detailed user browsing history.
Unnecessary snooping
Palant published ablog postdetailing his findings at the end of October but in a second blog post, he revealed that the Avast SafePrice and AVG SafePrice extensions were also collecting unnecessary data.
The first blog post did not get the attention Palant thought it would and so he reported the extensions to Mozilla developers. The Firefox maker quickly took action and removed all four add-ons from its portal within 24 hours.
However, at the time of writing, the four extensions are still available on theChrome Web Store. In hissecond blog post, Palant explained how difficult it is to get an extension removed fromGoogleChrome, saying:
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
“And what about Google? Google Chrome is where the overwhelming majority of these users are. The only official way to report an extension here is the “report abuse” link. I used that one of course, but previous experience shows that it never has any effect. Extensions have only ever been removed from the Chrome Web Store after considerable news coverage.”
Collecting a user’s browsing history is strictly prohibited by both Mozilla and Google, so expect the four extensions from Avast and AVG to be removed from the Chrome Web Store soon.
ViaZDNet
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.
Cisco issues patch to fix serious flaw allowing possible industrial systems takeover
7 myths about email security everyone should stop believing
Lego will let you build Sir Ernest Shackleton’s iconic lost ship, the Endurance, in its next Icons set
