Installing Safari Extensions on your Mac

Celestine Spencer — Sun, 09 Jan 2022 14:57:38 +0000

Safari extensions let you optimize and customize the way you use websites on your Mac.

Safari extensions are new features for the browser that make surfing the web as seamless as possible for you. Extensions include features to display useful information about web pages and news headlines, help you use your favorite services, change the look and feel of websites, and more. Extensions are a great way to personalize your web browser.

The App Store makes it easy to download and install Safari extensions. All extensions in the App Store are vetted, signed and submitted by Apple to make sure they’re safe.

Extension installation

Start by installing the latest macOS updates to work with an updated version of Safari. Safari 12 or later is required to download and install Safari extensions from the App Store.

Find and install an extension:

Open the Safari browser and select Safari > Safari Extensions from the menu.
The “Safari Extensions” page will open the App Store as shown above. To download and install the extension, click “Get” or click on the price. You may need to sign in with your Apple ID.
Click the “Install” button.
Once the extension is installed, click “Open” and follow the on-screen instructions of the extension.

Then return to the Safari browser to enable the installed extensions:

Choose Safari > Settings.
Click Extensions.
Check the box next to the name of the extension.

Any extensions you install from the App Store will update automatically.

Uninstall or remove extensions

Click Safari > Settings, and then click the Extensions tab.

To disable extensions, uncheck the checkbox.
To remove an extension, select the extension you want and then click the “Remove” button. If you don’t know what an extension is for, or don’t plan to use it in the future, it is recommended that you uninstall the extension.

Other information

Safari no longer supports most web plug-ins. To help speed up web page loading, save battery life, and improve security, Safari is optimized to handle content using the HTML5 web standard, which does not require plug-ins. Use Safari extensions instead of web plug-ins to optimize and customize your web experience.

The post Installing Safari Extensions on your Mac appeared first on Slide SJS.

Chrome plugin installs miner and uses victim’s Gmail to register domains

Celestine Spencer — Sun, 19 Dec 2021 09:48:07 +0000

The malicious Ldi extension has now been removed from the Chrome Web Store.

As the Chrome browser grows in popularity, the number of malicious extensions for it is also growing. Attackers use “clones” of popular plugins to deliver ads, malicious extensions to spoof search queries, or embed a Coinhive cryptocurrency miner in the browser.

IS expert Lawrence Abrams discovered the Ldi plugin, which takes malicious extension activity to the next level. Ldi not only installs the Coinhive miner in the browser, but also uses the victim’s Gmail account to register free domains using the Freenom service.

The extension was distributed via sites with JavaScript notifications urging the user to install the plugin. When the user tried to close the notification, the Ldi page in the Chrome Web Store was automatically opened. The product description was uninformative. “Don’t know if your homepage is compatible with your Mac? Find out with Ldi,” the description of the plugin read. The malicious extension has now been removed from the Chrome Web Store.

The Pirate Bay and Showtime websites were among the first to be caught using Coinhive. A total of 220 sites are secretly mining cryptocurrencies.

The post Chrome plugin installs miner and uses victim’s Gmail to register domains appeared first on Slide SJS.

Apple, Mozilla, Google, and Microsoft standardize extensions

Celestine Spencer — Mon, 18 Oct 2021 09:50:00 +0000

With the release of macOS Big Sur, Safari started using a new extensions API that allows you to use plugins created for other browsers. Now we know that developers from Apple, Mozilla, Google, and Microsoft have decided to go a step further, joining forces to standardize the methodology for extension development. Plugin developers will also be able to participate in this initiative.
Representatives from all major browser developers are reportedly participating in the standardization of extensions, and the group, called the WebExtensions Community Group (WECG), will be led by Timothy Hatcher from Apple and Simeon Vincent from Google. Together, they will try to solve several basic problems.
First of all, we are talking about simplifying the development process of extensions by creating a coherent model and a common core, functionality, APIs and permissions. It is also planned to create a description of the architecture; the use of which will improve the performance of created solutions, as well as make them more secure.
At the same time, the project participants do not intend to specify every aspect of extensions development or stifle innovation. Each browser developer will continue to work independently according to their own rules and policies. Extension and browser developers interested in participating in this project can join by submitting an application on the World Wide Web Consortium (W3C) website. WECG members have created a separate repository on GitHub, which will be used for future work. It also contains rules and regulations for the new developer community.

Google has added new security features to the Chrome browser. They’re here to make it easier to detect questionable downloads and extensions. These features build on the browser’s Advanced Secure Browsing feature, which was available last year and helps identify phishing sites.
The browser will now display a notification when extensions are installed; if a user-selected addon is not considered trustworthy. Only software released by developers who comply with Google Developer Program rules; and have been on the platform for at least several months will be included in the list of trusted extensions.
When a user tries to download an untrusted extension, the browser warns you to be careful. Google says that nearly three-quarters of the extensions available in the Chrome store will receive Trusted status.
Chrome also got a new feature to scan for suspicious downloads. In the future, users will be able to first download suspicious files to a Google server for a more thorough check; and only then download them to their computer. This feature can be turned off if desired. Google says that the new features will be gradually implemented in Chrome 91, released late last month.