![\"\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2017\/09\/Extensions.jpg\")
Security researchers in Europe have discovered a pair of flaws that relate to modern web browsers\u2019 extension system. Exploiting these flaws would allow a patient and determined hacker to determine with absolute accuracy of what extensions any given user is making use of.<\/p>\n
While not as critical of a flaw as some of the others we\u2019ve seen in recent months, this information could still be used to create highly accurate user profiles. This would allow hackers to create custom-tailored phishing attacks and landing pages that a given subset of users who had a certain set of browser extensions installed would be more likely to click on or investigate, thus falling into the hackers\u2019 trap.<\/p>\n
It should be noted that these two flaws appear in all of the popular web browsers in use today, including Firefox, Safari, Chrome, Opera, Microsoft Edge and others, so this is something that impacts the vast bulk of the world\u2019s internet users.<\/p>\n
The reason?<\/p>\n
All of these browsers use the same extension system, \u201cWebExtensions API,\u201d so the vulnerability is truly global in scope and scale.<\/p>\n
Unfortunately, there\u2019s not currently an ETA for a fix for the issue. The researchers approached all of the major browser makers to report the issue, but so far, none of the companies behind those products have responded with a firm plan for fixing the security flaw.<\/p>\n
In part, this is because they\u2019re all mired in the constant battle to close critical security loopholes, and this one just doesn\u2019t quite measure up. It is nonetheless disconcerting that literally none of the major browser makers have plans that they\u2019ve shared regarding this particular issue.<\/p>\n
Unfortunately, there\u2019s no practical defense against this for the time being. The only way to be sure you\u2019re not being tracked in this manner is to simply stay off the web entirely, which just isn\u2019t going to work for most people.<\/p>\n
When the situation changes and at least one company has a plan on the table for fixing the issue, we\u2019ll undoubtedly have more to say on the matter.<\/p>\n","protected":false},"excerpt":{"rendered":"
Security researchers in Europe have discovered a pair of flaws that relate to modern web browsers\u2019 extension system. Exploiting these flaws would allow a patient and determined hacker to determine with absolute accuracy of what extensions any given user is making use of. While not as critical of a flaw as some of the others […]<\/p>\n","protected":false},"author":5,"featured_media":30066,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[30],"yoast_head":"\n