CRX aminer
Extension icon

FreshBooks Time Tracker

Version 3.4 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Rating: 2.5 ★ (45 ratings)
Users: 4,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension appears to be associated with FreshBooks, a legitimate accounting software company, which adds some credibility. However, the low user count of only 4,000 users and poor rating of 2.5 stars with 45 reviews raises significant concerns about quality and user satisfaction. The lack of visible developer information and missing last updated date further diminishes trust.

Concerns:

The tabs permission is particularly concerning for a time tracking application, as it allows the extension to access and manipulate all browser tabs, which goes beyond what's necessary for basic time tracking functionality. The identity permission, while potentially needed for FreshBooks integration, creates additional privacy risks by accessing user identity information. The combination of these permissions with the extension's poor user ratings suggests potential overreach in functionality or poor implementation.

Recommendations:

Given the high-risk permissions and poor user feedback, consider running this extension in a separate Chrome profile to isolate potential security risks. Before installation, verify this is the official FreshBooks extension by checking their website directly. Consider alternative time tracking solutions with better ratings and more transparent permission usage. If you must use this extension, regularly review what data it's accessing and consider disabling it when not actively tracking time. Monitor your FreshBooks account for any unusual activity after installation.

Findings

HIGH
High-Risk Permission: identity
This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: notifications
This extension has the notifications permission. Can show notifications.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.