Share

AVG’s Chrome extension exposes personal data of 9 million users

Customers who install AVG software on their PC get a prompt in the end to safeguard their browsers. If you want it, you’ll have to download it manually from the Chrome store.

Advertisement


Iran vows to expand missile programme against USA sanctions
As part of the deal, the US committed to unfreezing as much as 0 billion in Iranian oil money frozen in overseas accounts. While the rockets weren’t fired in the direction of any ships, Raines said Iran’s actions were “highly provocative”.

Web TuneUp works by validating links that appear on a web browser page, such as on a search engine results list. That investigation could mean the extension is permanently banned from Chrome.


Downton Abbey set for fashion exhibition
EastEnders, which was up against Downton at 8:45pm, pulled in 5.7 million viewers. The “Downton Abbey” series finale airs December 25 on ITV.

Quite a few issues arise from installing the extension, for instance that it changes the startup setting to “open a specific page” ignoring the users choice (for instance to continue the last session). It is not known yet if any users were affected by the security scare. AVG earns when users make searches and click on ads on the custom search engine they have created.


Coalition Calls For Civil Unrest in Tamir Rice Case
He said Tamir reached for his waistband and that he saw a gun and fired to protect himself and Garmback. A judge ultimately acquitted the patrolman of manslaughter.

AVG developers have quickly responded to the issue, but it has been revealed that despite the messages exchanged between the two companies, the Amsterdam-based company has failed in its initial attempt to fix the flaw. On the email, he wrote that he apologizes for the note’s angry tone but that they are not pleased with what the tool is doing to their Chrome users. “The extension is so badly broken that I’m not sure whether I should be reporting it to you as a vulnerability, or asking the extension abuse team to investigate if it’s a PuP [Potentially unwanted Program]”.

Google Project Zero researcher Tavis Ormandy discovered a vulnerability, since fixed, in AVG Web TuneUp, a Chrome extension that forcibly installs when users install the AVG antivirus software. Malicious websites could exploit the toolbar’s programming blunders to access other websites a user was logged into. As the Google employee pointed out in a second report, anyone can add that to their domain and because it does not check for a secure origin, it is vulnerable to man-in-the-middle attacks, effectively disabling SSL.

Advertisement

As of December 28, AVG had completed a more secure patch, but installations of the plugin were still frozen while Google’s Chrome Web Store team investigated possible policy violations by AVG-violations that could get AVG kicked off the Chrome Store completely. I can see from the webstore statistics it has almost 9 million active Chrome users. The irony of an anti-malware extension jeopardizing security is not lost on anyone.

AVG-WebTuneUP