Chrome for MacOS to block rogue ad injections and settings changes
Credit to Author: Lucian Constantin| Date: Thu, 02 Mar 2017 07:46:00 -0800
Google has expanded its Safe Browsing service, allowing Google Chrome on macOS to better protect users from programs that locally inject ads into web pages or that change the browser’s home page and search settings.
The Safe Browsing service is used by Google’s search engine, as well as by Google Chrome and Mozilla Firefox, to block users from accessing websites that host malicious code or malicious software. Chrome also uses the service to scan downloaded files and to block users from executing those that are flagged as malicious.
“Safe Browsing is broadening its protection of macOS devices, enabling safer browsing experiences by improving defenses against unwanted software and malware targeting macOS,” Google said in a blog post Wednesday. “As a result, macOS users may start seeing more warnings when they navigate to dangerous sites or download dangerous files.”
In particular, this new Safe Browsing expansion on macOS targets applications that harm the user’s browsing experience. These are apps that use unauthorized methods to inject unwanted ads into web traffic or change the browser’s settings.
According to Google’s policies, applications can interfere only with the browser’s normal functionality through a Chrome extension published in the Chrome Web Store. Injecting ads into web pages through other programmatic means, deploying local proxies to intercept traffic or inserting user interface elements into web pages by patching the Chrome binary are considered violations of this policy.
Chrome for Windows has long provided a Settings API that allows extension developers to make legitimate changes to the browser’s settings. The same API has now been implemented in Chrome for macOS.
“Starting March 31 2017, Chrome and Safe Browsing will warn users about software that attempts to modify Chrome settings without using the API,” Google said.
It’s not clear if this new policy might impact more than malicious programs. There are legitimate applications, such as antivirus programs, that use alternative programmatic techniques to intercept and inspect browser traffic.