Ramblings of an old Doc

 

Although Google has reported it with respect to Chrome, it likely affects other browsers.

It’s from AVG and it installs automatically without permission whenever the user installed the main AVG AV software. Since Chrome has similar tools, it isn’t even necessary.

AVG set their browser extension to bypass the normal vetting process by the Chrome Store. This allowed AVG to change the user’s home page when opening the browser and new tabs.

Apparently, it also did not encrypt data being sent on the extension’s “call home” and enabled hackers to easily intercept sensitive personal data as well as sites visited, and could enable the hackers to send malicious code to the user disguised as AVG legitimate content.

“The Google engineer contacted AVG with a demand that it fix the problem. AVG initially responded by tweaking the extension so that it would only send data to websites containing 'avg.com' in the address. However, as the Google Engineer pointed out, this would not work because hackers could simply create a site which included 'avg.com' as part of the full web address. AVG has now issued a patch for the problems. In spite of this, Google has put a freeze on anyone downloading the extension until it completes an investigation into whether AVG broke its guidelines. That investigation could mean the extension is permanently banned from Chrome.” – infopackets from Ars Technica

So…your AVG might not be such a bargain after all, and I’d suggest a different AV, especially if you like using Chrome…because, if AVG deliberately circumvented Google Store’s vetting, it may be forever excluded from Chrome…and who knows what else they’ve been up to just to sell data. Somehow, an AV company compromising a user’s security in such a manner would be a deal breaker for me, at least.

Source:

http://arstechnica.com/security/2015/12/google-slams-avg-for-exposing-chrome-user-data-with-security-plugin/

https://www.infopackets.com/news/9753/9-million-risk-browser-security-tool


Comments (Page 1)
2 Pages1 2 
on Dec 31, 2015

Amen to that.  Shame we have to be so careful with apps (originally) intended to protect/help us.

on Dec 31, 2015

Web TuneUp comes as an add-on to AVG. You can opt out if you wish and I did. There is no add-on to Chrome, not on my browser.

on Dec 31, 2015

Just another reason why I've always enjoyed 'least privilege computing' vs third-party software protection

Most of my systems do not run AV/anti-whatever at all (I like my system resources/cpu cycles to be for MY use thank you); and I only keep a few on-demand utils around just in case.

on Dec 31, 2015

Definitely the safest option, Monk.  Keep pounding it home.

But I notice you say, 'most'. 

 

On that subject, is it possible to clone a profile & change the cloned profile's privilege level to User?

on Dec 31, 2015

Daiwa

Definitely the safest option, Monk.  Keep pounding it home.

But I notice you say, 'most'. 

 

On that subject, is it possible to clone a profile & change the cloned profile's privilege level to User?

 

Yeah I said 'most' because well.....one or two of my machines have need (from time to time) to dwell in the nether regions of this cesspool we call the internet and so on those machines (since they aren't daily drivers / production machines) I don't mind giving away system resources for some slightly more active protection

Yes it is very much possible to clone profiles etc. etc.  I have been using software by www.forensit.com for many years to do just that and other things.

Their free versions should be more than enough for your needs.

on Dec 31, 2015

the_Monk

I've always enjoyed 'least privilege computing'

Care to elaborate a bit on how to do that?

on Dec 31, 2015


Web TuneUp comes as an add-on to AVG. You can opt out if you wish and I did.

Interesting...then why does Google say the opposite, and that AVG doesn't ask?

I'd suggest checking your extensions in Chrome again...

on Dec 31, 2015

The times I used avg I opted out for the reason I use system mechanic professional for my runeup needs.  My kindle won't let me look at forensic what's that. 

on Dec 31, 2015

DrJBHL

Care to elaborate a bit on how to do that?

I imagine he's referring to his perennial recommendation to always/routinely use a profile with only User privileges (not Administrator).  Only switch to admin profile when necessary (or use the "run as Admin" right-click option when necessary).

on Dec 31, 2015

Oh so you can't download anything.

on Jan 01, 2016

admiralWillyWilber

Oh so you can't download anything.

Yeah, that's it.

on Jan 01, 2016

If you just want to be relatively safe, you can even run as the administrator and just use your brain about certain things.  My long running joke answer for people with virus issues is to stop downloading porn off warez sites, and warez off porn sites.  It's only sort of a joke, between that and email attachments from strangers, you've pretty much covered 90% of the infection sources...

 

Between disabling Java and Flash on your browser, not going to the seedier side of the internet to start with, and, this one's for Grandpa, not opening all those stupid spam and chain letter attachments in your inbox, you can cut your risk down to basically zero.  I've gone years at a time without issues, and was asking for it on the rare occasions I picked one up, like when I downloaded a "key generator" for my Red Alert2 cd.  I've gotten viruses more frequently on supposedly good antivirus software than I have off of it.  Currently I ignore Microsoft's stuff as long as it doesn't annoy me, but the simple truth is that an intelligent computer user probably isn't getting any benefit from it.

 

Now if you're a bank or something, you need hardcore security because you're an active target for people who are seriously trying to hack you.  In which case, you still don't want a consumer antiviral.  They're really only useful to people that do dumb stuff without being set up to cripple functionality and cause you a lot of hassle.

on Jan 01, 2016

Daiwa


Quoting DrJBHL,

Care to elaborate a bit on how to do that?



I imagine he's referring to his perennial recommendation to always/routinely use a profile with only User privileges (not Administrator).  Only switch to admin profile when necessary (or use the "run as Admin" right-click option when necessary).

I've been trying to get him to elaborate on this mystery since Jesus played with carpenter's blocks.

on Jan 01, 2016

psychoak

My long running joke answer for people with virus issues is to stop downloading porn off warez sites, and warez off porn sites. It's only sort of a joke, between that and email attachments from strangers, you've pretty much covered 90% of the infection sources...

My nieces and nephews like their music downloads....so I'm forever removing Torrent software from their machines....generally after that eternal whine 'why is my computer slow...?'.

 

For entertainment I'd use various AV and Trojan checkers, etc and see how many 'issues' I could count up.

When the total is the wrong side of 400......

 

on Jan 01, 2016

Jafo I'm sure you do this, but if you keep removing stuff wouldn't that cause fragmentations which slow down the system. I'd recommending defragmentation and cleanup. As a bonus have you checked your power settings to make sure that they are high performance. The default for windows for labtops or desktops is balanced. Most manufactures power plans is like balanced. As another bonus windows settings are for pretty much like best appearance you could set this for best performance.

2 Pages1 2