Is there malware in Chromium in Slax?

written by Tomas M. 25 days ago

Several people complained that I've added malware to chromium in Slax, and similar shit :) So, lets take a look at it.

The chromium module in Slax is created using this method:
1) boot fresh Slax
2) apt install chromium
3) savechanges /04-chromium.sb

That is all. Well, the procedure is indeed a little bit more complicated since I want to remove some unneded files after apt install, and I need to provide a 'chromium' script which logins as guest user and starts the chromium binary, because chromium refuses to run as root, but other than that, I make no changes. Especially I add no chromium extensions etc. You can review the build script here

If you start chromium in Slax and check out chrome://extensions URL, you will indeed see three extensions. Those cannot be disabled or uninstalled through the settings interface. What are those extensions? Well I have no idea what they do, but you can gues by their names:

- bookmark manager
- pdf viewer
- cryptoTokenExtension

To be honest, I didn't know that chromium installed with apt install has such extensions. I am not sure if all of them are really needed. But as I mentioned, I am not adding these, if you install fresh Debian and you install chromium the way I did, you'll get those extensions too. I believe that Debian developers know what they are doing, and I doubt those extensions would be any harmful.

I can assure you that if I was to add malware to chromium in Slax, I would definitely add it in a way that you could never notice. Adding malware this way makes no sense :-)

Tomas M.

(c) 2017, Tomas M; rss