Is Linewize Connect safe?

Question

Accepted Answer

Linewize Connect is medium risk. When a student Chromebook joins a configured school network, the Linewize Connect extension automatically reads the student's signed-in Google account email address and transmits it to the school's Linewize appliance over unencrypted HTTP. The email address is placed in the URL as a plain-text query parameter, making it readable to any device on the same network segment. Dynamic analysis confirmed the request fires automatically — the student does not need to take any action. A passive capture on shared school Wi-Fi, ARP-spoofing, or a rogue access point on the LAN could intercept the email address or inject a spoofed authentication response to manipulate the extension's on-network session state.

Is Linewize Connect safe?

Findings