{"id":6162,"date":"2024-09-27T12:17:31","date_gmt":"2024-09-27T12:17:31","guid":{"rendered":"https:\/\/www.tun.com\/home\/?p=6162"},"modified":"2024-10-17T14:10:28","modified_gmt":"2024-10-17T14:10:28","slug":"new-georgia-tech-study-exposes-privacy-risks-in-thousands-of-browser-extensions","status":"publish","type":"post","link":"https:\/\/www.tun.com\/home\/new-georgia-tech-study-exposes-privacy-risks-in-thousands-of-browser-extensions\/","title":{"rendered":"New Georgia Tech Study Exposes Privacy Risks in Thousands of Browser Extensions"},"content":{"rendered":"\n<div class=\"wp-block-group\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-uagb-blockquote uagb-block-e7eb3fc3 uagb-blockquote__skin-border uagb-blockquote__stack-img-none\"><blockquote class=\"uagb-blockquote\"><div class=\"uagb-blockquote__content\">New research from Georgia Tech reveals alarming privacy risks posed by thousands of browser extensions. These popular software add-ons, designed to enhance the web browsing experience, are found to be collecting sensitive user information from webpages, putting millions of internet users at risk.<\/div><footer><div class=\"uagb-blockquote__author-wrap uagb-blockquote__author-at-left\"><\/div><\/footer><\/blockquote><\/div>\n\n\n\n<div class=\"wp-block-group is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-0dfbf163 wp-block-group-is-layout-flex\"><div style=\"font-size:16px;\" class=\"has-text-align-left wp-block-post-author\"><div class=\"wp-block-post-author__content\"><p class=\"wp-block-post-author__name\">The University Network<\/p><\/div><\/div>\n\n\n<div class=\"wp-block-uagb-social-share uagb-social-share__outer-wrap uagb-social-share__layout-horizontal uagb-block-ee584a31\">\n<div class=\"wp-block-uagb-social-share-child uagb-ss-repeater uagb-ss__wrapper uagb-block-ec619ce7\"><span class=\"uagb-ss__link\" data-href=\"https:\/\/www.facebook.com\/sharer.php?u=\" tabindex=\"0\" role=\"button\" aria-label=\"facebook\"><span class=\"uagb-ss__source-wrap\"><span class=\"uagb-ss__source-icon\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\"><path d=\"M504 256C504 119 393 8 256 8S8 119 8 256c0 123.8 90.69 226.4 209.3 245V327.7h-63V256h63v-54.64c0-62.15 37-96.48 93.67-96.48 27.14 0 55.52 4.84 55.52 4.84v61h-31.28c-30.8 0-40.41 19.12-40.41 38.73V256h68.78l-11 71.69h-57.78V501C413.3 482.4 504 379.8 504 256z\"><\/path><\/svg><\/span><\/span><\/span><\/div>\n\n\n\n<div class=\"wp-block-uagb-social-share-child uagb-ss-repeater uagb-ss__wrapper uagb-block-32d99934\"><span class=\"uagb-ss__link\" data-href=\"https:\/\/twitter.com\/share?url=\" tabindex=\"0\" role=\"button\" aria-label=\"twitter\"><span class=\"uagb-ss__source-wrap\"><span class=\"uagb-ss__source-icon\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\"><path d=\"M389.2 48h70.6L305.6 224.2 487 464H345L233.7 318.6 106.5 464H35.8L200.7 275.5 26.8 48H172.4L272.9 180.9 389.2 48zM364.4 421.8h39.1L151.1 88h-42L364.4 421.8z\"><\/path><\/svg><\/span><\/span><\/span><\/div>\n\n\n\n<div class=\"wp-block-uagb-social-share-child uagb-ss-repeater uagb-ss__wrapper uagb-block-1d136f14\"><span class=\"uagb-ss__link\" data-href=\"https:\/\/www.linkedin.com\/shareArticle?url=\" tabindex=\"0\" role=\"button\" aria-label=\"linkedin\"><span class=\"uagb-ss__source-wrap\"><span class=\"uagb-ss__source-icon\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 448 512\"><path d=\"M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z\"><\/path><\/svg><\/span><\/span><\/span><\/div>\n<\/div>\n<\/div>\n<\/div><\/div>\n\n\n\n<p>New research from Georgia Tech reveals alarming privacy risks posed by thousands of browser extensions. These popular software add-ons, designed to enhance the web browsing experience, are found to be collecting sensitive user information from webpages, putting millions of internet users at risk.<\/p>\n\n\n\n<p>Led by Frank Li, an assistant professor in the School of Cybersecurity and Privacy and the School of Electrical and Computer Engineering, and doctoral student Qinge Xie, the research team developed a groundbreaking system to monitor data collection practices by browser extensions.<\/p>\n\n\n\n<p>\u201cWe know from prior research that browser extensions collect users\u2019 browser activity and history, but some of the most sensitive user data is located within webpages, such as emails, social media profiles, medical records, banking information and more,&#8221; said Li in a <a href=\"https:\/\/news.gatech.edu\/news\/2024\/09\/17\/study-finds-thousands-browser-extensions-compromise-user-data\">news release<\/a>. &#8220;We wanted to know if extensions are also collecting personal data from these webpages.&#8221;<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Their study, <a href=\"https:\/\/www.usenix.org\/conference\/usenixsecurity24\/presentation\/xie-qinge\" title=\"\">presented<\/a> at the Usenix Security Symposium, a top-tier cybersecurity conference, in August, found that over 3,000 browser extensions automatically extract user-specific data. This includes sensitive information from sites like Amazon, Facebook, Gmail, Instagram, LinkedIn, Outlook and PayPal. More than 200 of these extensions directly uploaded such data to external servers.<\/p>\n\n\n\n<p>These findings indicate a pervasive issue within the ecosystem of browser extensions. Although some extensions collect data for legitimate functionality, identifying the real intent behind such data collection remains challenging. <\/p>\n\n\n\n<p>The researchers highlighted that none of the sampled extensions clearly disclosed their data collection practices in their privacy policies or web store descriptions. <\/p>\n\n\n\n<p>\u201cUnfortunately, the same capabilities that extensions rely on to enrich the web browsing experience can also be abused to harm user privacy and potentially without users\u2019 knowledge or explicit consent,\u201d Xie said in the news release.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The implications of this study are significant for tech companies, suggesting the need for more stringent privacy policy enforcement and user data protection measures. Major companies like Google could lead by example. <\/p>\n\n\n\n<p>\u201cI don\u2019t believe individual users should have to bear the burden of worrying about their privacy or protecting their data, because they may not have the capability or technical knowledge to figure out what\u2019s happening,\u201dLi added. &#8220;The goal of this type of work is to bring these issues to the organizations or stakeholders that can influence data collection, in hopes that it can guide them in enhancing user privacy.\u201d<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The potential for privacy improvements in browser extensions underscores the importance of continued scrutiny and regulation to safeguard users\u2019 personal information.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>New research from Georgia Tech reveals alarming privacy risks posed by thousands of browser extensions. These popular software add-ons, designed to enhance the web browsing experience, are found to be collecting sensitive user information from webpages, putting millions of internet users at risk. Led by Frank Li, an assistant professor in the School of Cybersecurity [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"single-no-separators","format":"standard","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-6162","post","type-post","status-publish","format-standard","hentry","category-tech"],"acf":[],"aioseo_notices":[],"uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"The University Network","author_link":"https:\/\/www.tun.com\/home\/author\/funky_junkie\/"},"uagb_comment_info":0,"uagb_excerpt":"New research from Georgia Tech reveals alarming privacy risks posed by thousands of browser extensions. These popular software add-ons, designed to enhance the web browsing experience, are found to be collecting sensitive user information from webpages, putting millions of internet users at risk. Led by Frank Li, an assistant professor in the School of Cybersecurity&hellip;","_links":{"self":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts\/6162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/comments?post=6162"}],"version-history":[{"count":8,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts\/6162\/revisions"}],"predecessor-version":[{"id":6247,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/posts\/6162\/revisions\/6247"}],"wp:attachment":[{"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/media?parent=6162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/categories?post=6162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tun.com\/home\/wp-json\/wp\/v2\/tags?post=6162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}