Advice Request Is it dangerous to add extensions to Kaspersky' Secure Banking Browser ?

[JB007]

Hello,
I have started using Kaspersky Internet Security 2017 since 2 weeks because of issues with Avast.
And the first questions are already there
When I go on a bank site, Kaspersky opens it on the protected browser.
I would like to know if it is dangerous for the security to add extensions (µBlock, LastPass and Kaspersky Protection) to this protected browser, like on my current browser (Chrome) ?
Thanks for your opinions.

 

[Ink]

Can you add extensions to Kaspersky's Secure Browser, because in Avast's SafeZone browser you cannot.

LastPass and uBlock are reputable and trusted by millions, it would an issue if you used some spying-extension or something that intercepted HTTPS traffic.

 

[Deleted member 2913]

If you are going to use protected browser, I think you need Kaspersky Protection Extension...

 

[509322]

The whole point of using a protected browser is to protect data. Installing extensions creates a risk of data being exfiltrated out of the browser by an extension or the creation of a vulnerability. I can't imagine that Kaspersky would permit the install of any 3rd-party extensions into its hardened browser.

 

[JB007]

The whole point of using a protected browser is to protect data. Installing extensions creates a risk of data being exfiltrated out of the browser by an extension or the creation of a vulnerability. I can't imagine that Kaspersky would permit the install of any 3rd-party extensions into its hardened browser.

Yes Kaspersky Allows it !

 

[insanity]

It's not dangerous to install these extensions (uBlock, Lastpass) but at least it is not advisable. Usually, this safe browser is intended for accessing your bank accounts and not for your usual internet browsing. They are supposed to provide a safer environment and every time you install an add-on you may be introducing a risk (albeit low) that some extension compromise your safety.

 

[509322]

Yes Kaspersky Allows it !
View attachment 137778

And what happens when you navigate to a Safe Money defined website ? Are those extensions disabled ?

 

[motox781]

And what happens when you navigate to a SafeMoney defined website ? Are those extensions disabled ?

No, extensions are enabled no matter what site you go to using Safe Money.

I used Safe Money with Kaspersky Password Manager (requires extension) and Ublock Origin (probably not needed since Safe Money works only on secure sites...but I use it anyway).

I much prefer having the capability to add extensions, otherwise I wouldn't be able to use passwords managers (without password managers in hardened browsers, what the point of using it if you use password managers, ex: LastPass, Kaspersky Password Manager, Dashlane, etc).

 

[harlan4096]

Yes, Safe Money allows install inside the sandboxed instance extensions, but I would not do it... as @Lockdown said in post #4... the only I would allow probably would Kaspersky PassWord Manager extension...

 

[509322]

Yes, Safe Money allows install inside the sandboxed instance extensions, but I would not do it... as @Lockdown said in post #4... the only I would allow probably would Kaspersky PassWord Manager extension...

This all illustrates an example of "The security soft publisher allows it, so it has to be safe to do it."

"Safe" extensions might introduce vulnerabilities. It's not unheard of. This was the case within the past year - but I just can't remember which extensions. I think it involved Firefox.

Research it to be fully informed.

 

[motox781]

This all illustrates an example of "The security soft publisher allows it, so it has to be safe to do it."

"Safe" extensions might introduce vulnerabilities. It's not unheard of. This was the case within the past year - but I just can't remember which extensions. I think it involved Firefox.

Research it to be fully informed.

I think it's all about statistical probability. The chances of something like that happening is pretty low compared to other risks.

Sort of like someone declining meteor insurance on their home. Sure a meteor could strike your home, but the probability of it happening is last on the long list of risks.

P.S. I see what your saying though.

 

[509322]

I think it's all about statistical probability. The chances of something like that happening is pretty low compared to other risks.

Sort of like someone declining meteor insurance on their home. Sure a meteor could strike your home, but the probability of it happening is last on the long list of risks.

P.S. I see what your saying though.

Yes, I get that a fully aware user can decide for themselves what degree of risk they are willing to assume. That's not the case for someone who wouldn't even know to think about it. I also know how this sort of thing can turn out. Some researcher will discover an extension related vulnerability that manages to do this or that to this or that browser despite using Safe Money, resulting in things gone terribly wrong and decry Kaspersky as a screw-up. At the same time, Google - despite its best efforts - has had a hard time keeping malicious browser extensions off their site.

 

[motox781]

Yes, I get that a fully aware user can decide for themselves what degree of risk they are willing to assume. That's not the case for someone who wouldn't even know to think about it. I also know how this sort of thing can turn out. Some researcher will discover an extension related vulnerability that manages to do this or that to this or that browser despite using Safe Money, resulting in things gone terribly wrong and decry Kaspersky as a screw-up. At the same time, Google - despite its best efforts - has had a hard time keeping malicious browser extensions off their site.

I see what your saying, but like I said...I don't see extensions on hardened browsers being a high risk for either a skilled IT guy or average joe. For one, you have to manually install all extensions you want on Kaspersky's Safe Money (extensions don't transfer over from Chrome). Most average Joes will not purposely install new extensions on Safe Money, unless they need something very convenient and necessary such as a password manager.

My point was: OP, it's not that big of a deal in the grand scheme of things. If we were that concerned with security intricacies, we should all be tech free or using some weird secure distro of linux on a daily basis instead of Windows...but even both of those could be debatable as being insecure in some hypothetical or rare fashion.

 

[shukla44]

Yes, i agree with the statement that installing extensions in protected browser might cause some security issues.
Personally, i have only 2 addons (i use firefox) in protected browser - Kaspersky Protection & HTTPS Everywhere. All the plugins are disabled.
I don't have an ad-blocker 'cause i only use protected browser for banking & shopping.

 

[JB007]

Hello
Thanks at all for your advices.
I have uninstalled µBlock, only keeping Kaspersky Protection and LastPass.
Spend a good Sunday