Re: Contact for Chromium Extension

61 views
Skip to first unread message

Andrew R. Whalley

unread,
Feb 2, 2021, 8:05:07 PM2/2/21
to Souheil Moghnie, ChromeSecurity, site-isol...@chromium.org, Chromium-dev, Security-dev, Ashwin Subrahmanyam, Rajinikanth R, Suyambulingam T S M, Kabilan Karunanithi
Hi Souheil,

Thanks for getting in touch.  I'll see if I can find the right folk and get back to you off-list.

Cheers,

Andrew

On Tue, 2 Feb 2021 at 12:53, Souheil Moghnie <souheil...@nortonlifelock.com> wrote:

Hi Andrew and team Chromium,

I hope all is well and happy 2021… I am a security architect within NortonLifeLock (FNA Symantec) and we encountered the following issue:

 

We are currently using browser extensions for Norton Family which is required for certain features to function properly. Unlike other Norton extensions, here the user is Child who can easily disable/remove Norton Family extensions. This has been a big concern for parents and getting lot of forum issues.

 

We thought of applying Group policy for Norton Family extension, so that child cannot tamper it. Group policy settings generally be applied for enterprise solutions. But, we can pitch-in NF as similar to an enterprise solution – since parent is an admin and child is a user.  For parental controls we wanted to get an exception and start using it for Norton Family.

 

We would like to have this particular conversation with a direct Google contact person, so that we can explain better and get a buy-in.

 

Is this something you can assist us with?

 

Thanks,

Souheil

 

From: Kabilan Karunanithi <Kabilan.K...@nortonlifelock.com>
Sent: Tuesday, February 2, 2021 6:02 PM
To: Souheil Moghnie <souheil...@nortonlifelock.com>
Cc: Suyambulingam T S M <Suyambul...@nortonlifelock.com>; Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>; Rajinikanth R <Rajini...@nortonlifelock.com>
Subject: FW: Google Contacts

 

Hi Souheil,

 

Do we have contacts in Google who can be reached in this case to run through the proposal?.

 

Thanks,

Kabilan.

 

From: Suyambulingam T S M <Suyambul...@nortonlifelock.com>
Sent: Tuesday, February 2, 2021 12:45 PM
To: Arun Ganesan <Arun.G...@nortonlifelock.com>; Sriram Venkatraman <Sriram.Ve...@nortonlifelock.com>; Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>; Vivek Subramanian <Vivek.Su...@nortonlifelock.com>
Cc: Rajinikanth R <Rajini...@nortonlifelock.com>; Kabilan Karunanithi <Kabilan.K...@nortonlifelock.com>
Subject: RE: Google Contacts

 

Thanks Arun. Yes, we have gone through those details on Enterprise policy.

 

We already have a logic to constantly check extension status and alert parents that the extension has been disabled and ask them to re-enable it again. Even if you block chrome, child will start using another browser.

I agree with you that they may not allow us to use an enterprise setting, but just wanted to give it a try and it matters how we pitch-in for parental controls to get this buy-in.

 

Anyways we will check if we can find out a direct contact. Thanks everyone.

 

Best Regards

Suyambu

_____________________________________­_

NortonLifeLock Inc., Chennai

Off: +91 44 6628 5031 | Cell: +91 9176059674

 

From: Arun Ganesan <Arun.G...@nortonlifelock.com>
Sent: Tuesday, February 2, 2021 12:09 PM
To: Suyambulingam T S M <Suyambul...@nortonlifelock.com>; Sriram Venkatraman <Sriram.Ve...@nortonlifelock.com>; Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>; Vivek Subramanian <Vivek.Su...@nortonlifelock.com>
Cc: Rajinikanth R <Rajini...@nortonlifelock.com>; Kabilan Karunanithi <Kabilan.K...@nortonlifelock.com>
Subject: Re: Google Contacts

 

Hi Suyambu,

 

Those are the two ways we reach out to Google in relation to Extensions. We don’t have a direct contact at Google that we can reach out to, and don’t think they encourage that too – they don’t make it very easy. Earlier, they used to have a monthly Office Hour, where we can schedule a call with their Developer Advocate and get our questions answered but that has been stopped at least since a year.

 

Coming to your requirement, I doubt if Google will accept this solution given that the Group policy is geared towards Enterprises alone. Guess you might already have checked it but including it here just in case; info about managing extensions in Enterprise is available here: https://support.google.com/chrome/a/answer/9296680?hl=en

 

One other way I can think of to solve this is, if the Windows NF app is installed, it can poll for presence of the extension at regular intervals; if extension is not present/disabled, the app can block usage of Chrome/ask users to install extension. There’s logic in NCO that is used to determine Browser Protection extensions status across all the browsers we support, perhaps that can be reused. We can discuss further if you think this could be an option.

 

Thanks & Regards,

Arun

 

From: Suyambulingam T S M <Suyambul...@nortonlifelock.com>
Date: Tuesday, February 2, 2021 at 10:27 AM
To: Sriram Venkatraman <Sriram.Ve...@nortonlifelock.com>, Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>, Vivek Subramanian <Vivek.Su...@nortonlifelock.com>, Arun Ganesan <Arun.G...@nortonlifelock.com>
Cc: Rajinikanth R <Rajini...@nortonlifelock.com>, Kabilan Karunanithi <Kabilan.K...@nortonlifelock.com>
Subject: RE: Google Contacts

 

Thank Sriram.

 

Yes, we have that DL with which we post general questions to Google Chrome regarding extensions, however we mostly get an automated response there.

We also tried posting in Google Forums, we have got some reasonable response.  But again if we have any direct contact points from NLOK to Google, that’s what will help us to discuss the below issue.

 

Here is the Ask (for which we are trying to reach out a direct contact person)...

We are currently using browser extensions for Norton Family which is required for certain features to function properly. Unlike other Norton extensions, here the user is Child who can easily disable/remove

Norton Family extensions. This has been a big concern for parents and getting lot of forum issues.

 

We thought of applying Group policy for Norton Family extension, so that child cannot tamper it.

Group policy settings generally be applied for enterprise solutions. But, we can pitch-in NF as an enterprise solution – as parent is an admin and child is a user.

For parental controls we wanted to get an exception and start using it for Norton Family.

 

We would like to have this particular conversation with a direct Google contact person, so that we can explain better and get a buy-in.

 

Best Regards

Suyambu

_____________________________________­_

NortonLifeLock Inc., Chennai

Off: +91 44 6628 5031 | Cell: +91 9176059674

cid:image001.png@01D6F94C.6E68F010

 

From: Sriram Venkatraman <Sriram.Ve...@nortonlifelock.com>
Sent: Tuesday, February 2, 2021 9:47 AM
To: Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>; Josh Opos <Josh...@nortonlifelock.com>; Suyambulingam T S M <Suyambul...@nortonlifelock.com>; Vivek Subramanian <Vivek.Su...@nortonlifelock.com>; Arun Ganesan <Arun.G...@nortonlifelock.com>
Cc: Rajinikanth R <Rajini...@nortonlifelock.com>
Subject: Re: Google Contacts

 

Hi Ashwin,

   Vivek/Arun G (added) should be able to help here. We have a DL which we reach out to for questions which is also used by Google chrome team also for questions to us. May be that is the right starting point for you. 

 

Thanks

Sriram


From: Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>
Sent: Monday, February 1, 2021 11:30:09 PM
To: Josh Opos <Josh...@nortonlifelock.com>; Suyambulingam T S M <Suyambul...@nortonlifelock.com>; Sriram Venkatraman <Sriram.Ve...@nortonlifelock.com>
Cc: Rajinikanth R <Rajini...@nortonlifelock.com>
Subject: RE: Google Contacts

 

Thanks Josh for a quick reply.

We shall sync up with Sriram tomorrow during Chennai time.

 

Regards,

Ashwin

_____________________________________­_____

NortonLifeLock Inc., Chennai

Off: +91 – 44 – 6628 5470 | Cell: +91 – 91760 52756

cid:image002.png@01D6F94C.6E68F010

 

From: Josh Opos <Josh...@nortonlifelock.com>
Sent: Monday, February 1, 2021 11:28 PM
To: Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>; Suyambulingam T S M <Suyambul...@nortonlifelock.com>; Sriram Venkatraman <Sriram.Ve...@nortonlifelock.com>
Cc: Rajinikanth R <Rajini...@nortonlifelock.com>
Subject: Re: Google Contacts

 

Adding @Sriram Venkatraman

 

Hi Ashwin/Suyambu,

 

Unfortunately, I don’t have any contacts at Google that can help with this… Sriram may have some in the extension space, so added him here for comment.

 

Thanks,

Josh

 

From: Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>
Date: Monday, February 1, 2021 at 9:55 AM
To: Suyambulingam T S M <Suyambul...@nortonlifelock.com>, Josh Opos <Josh...@nortonlifelock.com>
Cc: Rajinikanth R <Rajini...@nortonlifelock.com>
Subject: RE: Google Contacts

 

Josh,

Could you please confirm if you happen to have any Google contacts that we can reach out to?

 

We are looking at Google Chrome browser contacts to check on group policy settings for Norton Family browser extensions as part of an enhancement that we are trying to make.

Please loop in or suggest others who can help here. Appreciate your help here with a quick response.

 

Regards,

Ashwin

_____________________________________­_____

NortonLifeLock Inc., Chennai

Off: +91 – 44 – 6628 5470 | Cell: +91 – 91760 52756

cid:image003.png@01D6F94C.6E68F010

 

From: Suyambulingam T S M <Suyambul...@nortonlifelock.com>
Sent: Thursday, January 28, 2021 3:22 PM
To: Josh Opos <Josh...@nortonlifelock.com>
Cc: Ashwin Subrahmanyam <Ashwin.Su...@nortonlifelock.com>; Rajinikanth R <Rajini...@nortonlifelock.com>
Subject: Google Contacts

 

Hi Josh

 

We would like to know, if there are any Google contact points that you have.

We need to talk to them regarding our Norton Family extension group policy.

 

Best Regards

Suyambu

_____________________________________­_

NortonLifeLock Inc., Chennai

Off: +91 44 6628 5031 | Cell: +91 9176059674

cid:image004.png@01D6F94C.6E68F010

 

Souheil Moghnie

unread,
Feb 10, 2021, 7:09:50 PM2/10/21
to Andrew R. Whalley, ChromeSecurity, site-isol...@chromium.org, Chromium-dev, Security-dev, Ashwin Subrahmanyam, Rajinikanth R, Suyambulingam T S M, Kabilan Karunanithi
Reply all
Reply to author
Forward
0 new messages