Live Updates: COVID-19 Cases
  • World 13,742,618
    Confirmed: 13,742,618
    Active: 4,962,658
    Recovered: 8,191,951
    Death: 588,009
  • USA 3,619,663
    Confirmed: 3,619,663
    Active: 1,832,765
    Recovered: 1,646,698
    Death: 140,200
  • Brazil 1,972,072
    Confirmed: 1,972,072
    Active: 529,729
    Recovered: 1,366,775
    Death: 75,568
  • India 979,719
    Confirmed: 979,719
    Active: 335,425
    Recovered: 619,193
    Death: 25,101
  • Russia 752,797
    Confirmed: 752,797
    Active: 209,168
    Recovered: 531,692
    Death: 11,937
  • Peru 337,724
    Confirmed: 337,724
    Active: 98,907
    Recovered: 226,400
    Death: 12,417
  • Chile 321,205
    Confirmed: 321,205
    Active: 21,934
    Recovered: 292,085
    Death: 7,186
  • Mexico 317,635
    Confirmed: 317,635
    Active: 81,600
    Recovered: 199,129
    Death: 36,906
  • South Africa 311,049
    South Africa
    Confirmed: 311,049
    Active: 145,903
    Recovered: 160,693
    Death: 4,453
  • Spain 304,574
    Confirmed: 304,574
    Active: 276,161
    Recovered: ?
    Death: 28,413
  • UK 291,911
    Confirmed: 291,911
    Active: 246,858
    Recovered: ?
    Death: 45,053
  • Iran 267,061
    Confirmed: 267,061
    Active: 22,845
    Recovered: 230,608
    Death: 13,608
  • Pakistan 257,914
    Confirmed: 257,914
    Active: 73,751
    Recovered: 178,737
    Death: 5,426
  • Italy 243,506
    Confirmed: 243,506
    Active: 12,493
    Recovered: 196,016
    Death: 34,997
  • Saudi Arabia 243,238
    Saudi Arabia
    Confirmed: 243,238
    Active: 53,246
    Recovered: 187,622
    Death: 2,370
  • Turkey 215,940
    Confirmed: 215,940
    Active: 12,788
    Recovered: 197,733
    Death: 5,419
  • Germany 201,281
    Confirmed: 201,281
    Active: 5,733
    Recovered: 186,400
    Death: 9,148
  • Bangladesh 196,323
    Confirmed: 196,323
    Active: 86,864
    Recovered: 106,963
    Death: 2,496
  • France 173,304
    Confirmed: 173,304
    Active: 64,364
    Recovered: 78,820
    Death: 30,120
  • Canada 108,829
    Confirmed: 108,829
    Active: 27,534
    Recovered: 72,485
    Death: 8,810
  • China 83,612
    Confirmed: 83,612
    Active: 259
    Recovered: 78,719
    Death: 4,634
  • Netherlands 51,351
    Confirmed: 51,351
    Active: 45,214
    Recovered: ?
    Death: 6,137
  • S. Korea 13,612
    S. Korea
    Confirmed: 13,612
    Active: 925
    Recovered: 12,396
    Death: 291
  • Australia 10,810
    Confirmed: 10,810
    Active: 2,662
    Recovered: 8,035
    Death: 113
  • New Zealand 1,548
    New Zealand
    Confirmed: 1,548
    Active: 27
    Recovered: 1,499
    Death: 22

Google Chrome 70, worth the effort towards safer default extensions

Author at TechGenyz Tech
Chrome Extensions
For 10 long years, Chrome has produced over 180,000 extensions in the Chrome web store which enabled desktop users to customize Chrome and their web experience. For the uninitiated, Extensions are small software programs that customize the browsing experience which helps users to mold Chrome functionality and behavior suiting individual needs or preferences. Today, Google announced a number of changes regarding handling extensions especially the ones requesting a considerable number of permissions. In addition, it has also declared a set of new requirements for developers who wish to publish their extensions on Chrome web store. Talking about the need and functions of Chrome extension, Chromium blog claims, "it’s crucial that users be able to trust the extensions they install are safe, privacy-preserving, and performant. Users should always have full transparency about the scope of their extensions’ capabilities and data access". In recent times, Chrome had taken initiatives to improve extension security with the launch of out-of-process iframes, the removal of inline installation, and advancements in their ability to detect and block malicious extensions. Today they added to their existing rules some new changes along with their plans for the future. Starting off with Chrome 70, Users are given the power to block extension host access to their custom list of sites and to configure extensions to need a click to be allowed access to the current page. This is how most chrome extensions will lose their ability to see and manipulate any website that the user frequents. This automatically improves user transparency and control over extensions. There's a transition guide which will guide you when any extension requires your permission. Adding on to it, Google promises that any extension that requests for "powerful permission" will be put under scrutiny. Also, extensions using a remotely hosted code, which can be altered any time, will also be under close inspection. To reduce review time, Chrome advises developers to include their code entirely in the extension package and also to narrow down the permission range. Chrome web store will stricty not allow any extension with an obscure code, whether the code is available within the extension package or externally or resource fetched. This applies from today onwards, for any new extension submitted. Existing Chrome extensions can continue, however, they will be required to update within a span of 90 days, failing which they will also be removed from Chrome web store. This follows Chrome's claim that over 70% of malicious extensions run on obfuscated code. The main use of the obfuscated code is to limit readability and thereby lessening the chances of code theft, but at the same time, such codes really make it difficult to be reviewed. "Ordinary minification, on the other hand, typically speeds up code execution as it reduces code size, and is much more straightforward to review. Thus, minification will still be allowed, including the following techniques:
  •  Removal of whitespace, newlines, code comments, and block delimiters
  •  Shortening of variable and function names
  •  Collapsing the number of JavaScript files", mentions Chrome in its blog.
With the start of the new year, Google will enable a two-step-verification process for all developer accounts. Once an extension gets popular, it has the chance of being stolen by hijacking the account. The two-step authentication is believed to add as an extra layer of security, the second layer of which will either be linked to the phone number or any "physical security key". Google is also considering Advanced Protection Program which offers security to Google's own employees. 2019 will also see the introduction of the next Chrome extensions of manifest version. Manifest v3 will necessitate extra platform changes aimed at creating stronger security, privacy, and performance guarantees.
We Are Hiring