Google has just released an extension that allows remote control of any system that has the Chrome Web Browser installed. Although still in the Beta stages Google claims that this add-in for their browser will help IT organizations to more easily manage systems in their networks and is completely cross-platform allowing access to Windows, Linux, Macs and even Chromebooks. The interface is probably very similar to other free browser based remote software like join.me, got to my pc, and the plethora of others that are out there. We are also pretty sure that it is just as insecure as these services which have all be compromised in one way or the other. In fact to the best of my knowledge only join.me has not been breached and that is because it does not install a permanent client. It is an on demand service that leaves very little to no trace after you close out the session.

Now, there is a danger that in inherent with any remote control software that resides on a computer as there is always the theoretical chance that someone can gain access to that API and exploit it. In fact it is not the remote control extension that I have a problem with (unless Google embeds it in the browser). Instead I am seeing a pattern that I think it being missed by not only the press but by the mainstream users out there.

Let’s take a look at what we have going on and see if you can spot the issue. Not all that long ago Google released a new API called Chrome Frame that allowed elevated permissions to be granted this API. This meant that users who normally cannot install applications would be allowed to install this API. This maneuver is very underhanded and quite shady.  Forcing elevated privileges is a technique used by more than a few people with malicious intent and it makes me wonder about Google’s motivations here.

Next up on the Google hit list was and “false” positive from Microsoft’s Security Essentials which identified Chrome as the W32/Zbot Trojan Horse. When you combine this with Google’s known habit of data collection of their users (ever track what Chrome, Google Toolbar and Google Desktop are doing?) it was not a shock to see this happen. In fact I am surprised that it has not happened sooner.

Now we see a remote control API being added in. I am becoming more and more concerned with Google’s motives and what their end-state is. Plus let’s not forget that the ChromeOS is based entirely off of the Chrome browser. Some of you may remember that this bundling of browser and OS got Microsoft into serious trouble, not once but twice. Where is the outcry over this operating system? I see none from the public or the Government. I guess it helps to have your CEO as the President’s technology advisor.  

I think it is time for everyone to take a long hard look at that Google is really doing. I have a feeling that if this is done, you might find that you do not like many of the liberties they are taking with your searches, your web habits and even your personal data.

Discuss in our Forum