The weird things is that nobody cares about browser extensions on work machines. Companies go through all the trouble in the name of security, especially on windows, but almost nobody controls the sort of crap people, including developers, install on their browsers. Some extensions request access to everything, rendering the entire security dance moot.
In fact, some of the worst offenders are people who absolutely should know better. I only know a handful of people who have agreed with me on this. Unbelievable.
Browsers have the tools for companies to manage this. My workplace actually does restrict extensions to an annoyingly small allowlist. But I think it’s not on the radar for as many companies because the extension controls are moot if you aren’t restricting which browsers are allowed or if you don’t restrict access to corporate resources to managed devices.
Your place sounds reasonable. I presume it's mostly banks and other such enterprises handling sensitive information. My wife has has to use FF with extensions disabled. Their IT made the right choices on this one
Comments
The weird things is that nobody cares about browser extensions on work machines. Companies go through all the trouble in the name of security, especially on windows, but almost nobody controls the sort of crap people, including developers, install on their browsers. Some extensions request access to everything, rendering the entire security dance moot.
In fact, some of the worst offenders are people who absolutely should know better. I only know a handful of people who have agreed with me on this. Unbelievable.
Browsers have the tools for companies to manage this. My workplace actually does restrict extensions to an annoyingly small allowlist. But I think it’s not on the radar for as many companies because the extension controls are moot if you aren’t restricting which browsers are allowed or if you don’t restrict access to corporate resources to managed devices.
Your place sounds reasonable. I presume it's mostly banks and other such enterprises handling sensitive information. My wife has has to use FF with extensions disabled. Their IT made the right choices on this one