Chrome Remote Desktop
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
This is the companion extension for the Chrome Remote Desktop website (https://remotedesktop.google.com). This extension enables you to install, view, and modify the Chrome Remote Desktop native client from the web UI.
Chrome Remote Desktop allows users to remotely access another computer through Chrome browser or a Chromebook. Computers can be made available on an short-term basis for scenarios such as ad hoc remote support, or on a more long-term basis for remote access to your applications and files. All connections are fully secured.
Chrome Remote Desktop is fully cross-platform. Provide remote assistance to Windows, Mac and Linux users, or access your Windows and Mac desktops at any time, all from the Chrome browser on virtually any device, including Chromebooks.
For information about privacy, please see the Google Privacy Policy and the Chrome Privacy Notice.
For help or troubleshooting please click here: https://support.google.com/chrome/answer/1649523
Tags
Privacy Practices
Security Analysis — Chrome Remote Desktop
Permissions
Code Patterns Detected
External Connections
Package Contents 5 files · 50KB
What This Extension Does
The Chrome Remote Desktop extension allows users to remotely access another computer through the Chrome browser or a Chromebook, providing remote assistance or long-term access to applications and files. It's suitable for users who need to provide support or access their desktops from anywhere. However, it requires careful consideration of permissions and data exposure.
Permissions Explained
- nativeMessagingexpected: This permission allows the extension to communicate with native applications on your computer, enabling remote control and file transfer.
Technical: The extension uses native messaging to interact with Chrome's native client, which can potentially expose sensitive data if compromised. Attack surface: high. - downloadsexpected: This permission allows the extension to download and install software on your computer, including the Chrome Remote Desktop client.
Technical: The extension uses this permission to manage downloads of the native client, which can potentially lead to malware or data exposure if not properly validated. Attack surface: medium.
Your Data
The extension accesses your computer's file system and network connections to enable remote access and file transfer. It sends data to remotedesktop.google.com, which is a secure domain.
Technical Details
Code Findings
The extension uses a technique called charCodeAt to obfuscate its code, making it harder for users to understand what the extension is doing.
Technical: The extension uses the charCodeAt function in JavaScript to encode its code, which can make it difficult to analyze or debug. File location: chrome-extension://inomeogfingihgjfjlpeplalcfajhgai/background.js; risk vector: medium.
💡 Obfuscation is commonly used in legitimate extensions to protect intellectual property and prevent reverse engineering.
The extension manages downloads of the Chrome Remote Desktop client, which can potentially lead to malware or data exposure if not properly validated.
Technical: The extension uses the downloads permission to manage downloads of the native client, which can expose users to potential security risks. File location: chrome-extension://inomeogfingihgjfjlpeplalcfajhgai/background.js; risk vector: medium.
💡 Managing downloads is a legitimate use case for extensions that need to install software on the user's computer.
The extension uses the postMessage API to communicate with other web pages, which is a common technique used in extensions to enable communication between different domains.
Technical: The extension uses the postMessage function to send messages to other web pages, which can be used for legitimate purposes such as enabling remote control or file transfer. File location: chrome-extension://inomeogfingihgjfjlpeplalcfajhgai/background.js; risk vector: low.
💡 Using postMessage is a common technique used in extensions to enable communication between different domains.
The extension sets up event listeners to respond to user interactions, which is a common technique used in extensions to provide functionality.
Technical: The extension uses the addEventListener function to set up event listeners for various events such as clicks and keyboard input. File location: chrome-extension://inomeogfingihgjfjlpeplalcfajhgai/background.js; risk vector: low.
💡 Setting up event listeners is a common technique used in extensions to provide functionality and respond to user interactions.
The Chrome Remote Desktop extension has some security concerns related to its use of native messaging and download management. However, these concerns are mitigated by the extension's secure communication with remotedesktop.google.com. Users should carefully review the permissions and data exposure before installing the extension.
