AVG Chrome extension created security risk for millions of users

You’d like to believe that a company that develops security software wouldn’t be shipping software that makes its users less safe. That wasn’t the case for AVG’s WebTuneUp extension for Chrome, however.
What, exactly, is Web TuneUp? Well, it doesn’t make websites load faster or improve your browser’s performance, as the name implies. It’s actually a search “enhancement.” I put that in quotes, because it’s up to interpretation whether what Web TuneUp does actually enhances anything.
Install the extension, and it flags questionable search results that happen to pop up. Google, of course, already does some scrubbing of search results and Chrome has built-in protection against malicious sites. Still, with 9 million users AVG’s done a good job of convincing people that they need the extra protection they say Web TuneUp provides… or at least a good job of sneaking it in during the installation of their antivirus software, which is used by more than 200 million people.
When Google reported the existence of a gaping flaw that appeared trivially easy to exploit and exposed users’ browsing history and hindered Chrome’s malware-checking abilities, they hoped AVG would move quickly to patch it up.
To their credit, they put together a fix and pushed it to the Chrome Web Store within four days of Google security engineer Tavis Ormandy’s initial report. They failed to take care of a potential man-in-the-middle vulnerability, though, and had to push a second update the next day after additional prompting from Ormandy.
As of today, the issue has been closed. That’s certainly good news for Chrome users that are running Web TuneUp, though it might not be a bad idea for those folks to just head to their extensions page and remove it entirely.

VW’s Global Vehicle Sales Decline as Diesel-Motor Recalls Loom

• 

  Deliveries of VW brand vehicles fell 4% on Russia, Brazil
• Group's European market share was the lowest since March

Volkswagen AG’s namesake car brand reported a 4 percent decline in global sales last month amid a scandal over cheating on diesel-emissions tests.
Deliveries at the VW brand, which is at the center of the crisis, fell to 513,500 cars from 534,800 a year ago, the Wolfsburg, Germany-based company said Friday in a statement. The drop at Volkswagen’s largest unit contributed to a 1.5 percent decline in group-wide sales to 885,300 vehicles in September.
Drops were sharpest in Russia and Brazil, where recessions are causing vehicle markets to shrink, while growth in Europe trailed competitors as the company prepared to recall 8.5 million vehicles with rigged diesel engines. Volkswagen’s U.S. market share also narrowed.
VW has been battling to repair its image after admitting to deliberately rigging diesel engines to circumvent emissions regulations. The manufacturer’s recall is one of the biggest ever in Europe. German regulators are forcing the company to fix affected cars, which total as many as 11 million vehicles worldwide.
Volkswagen’s registrations in Europe rose 8.3 percent in September, while the overall market expanded 9.8 percent, the Brussels-based European Automobile Manufacturers’ Association, or ACEA, said Friday. The owner of the VW, Audi, Skoda and Seat car brands accounted for 23.3 percent of the region’s auto sales last month, down from 23.7 percent a year earlier. It was the company’s weakest showing since March, and the decline may have been slowed by rebates.

Volkswagen's Loosening Grip on Europe's Car Market

“While we are wary of drawing conclusions from data captured only a few weeks after the emissions scandal, we suspect dealers may be resorting to discounts to compensate for any decline in sentiment from consumers,” Kristina Church and Charles Coldicott, analysts at Barclays Plc, said in a report this week. The manufacturer “experienced a noticeable uptick in discounting” in Germany in September.
Volkswagen’s group sales fell 44 percent in Brazil and 26 percent in Russia. In China, the manufacturer’s biggest market, deliveries slipped 0.8 percent in September.