CyberCertPrepAI Security FundamentalsSecure AI Deployment & MLOpsEASYFree question
Why is the browser permission 'read and change all your data on all websites' particularly dangerous for an AI extension on a work machine?
- A.It only affects the look of websites, not their data
- B.It lets the extension see and exfiltrate content from every site open in the browser, including internal systems like HR portals, email, and customer records, not just the pages where the AI feature is used
- C.It is dangerous solely because it drains the laptop battery
- D.Browsers never actually grant this permission
Why B is correct
That permission scopes the extension to every origin: an AI writing helper installed for one purpose can read webmail, intranet HR pages, CRM records, and anything else rendered in the browser, and send it to the developer's servers. On work machines this turns one casual install into an organization-wide data-leak channel, which is why enterprise allowlists scrutinize permission scope. The permission is about data access rather than cosmetics or battery, and browsers grant it routinely when users click accept.
Know someone studying for AI Security Fundamentals? Send them this one.