Is Operative IQ Finger Print Reader Plugin safe?

Medium risk

Operative IQ Finger Print Reader Plugin sends biometric fingerprint data to any cross-origin frame via wildcard postMessage on all pages.

The extension runs a content script on all URLs that listens for a 'startFingerPrint' DOM event, which any webpage can dispatch without restriction. When triggered, it reads from a locally installed native fingerprint reader (com.operativeiq.fingerprint) and relays the raw byte array back to the page using window.postMessage with a wildcard target origin ('*'). This means any cross-origin iframe on the same page can receive the biometric fingerprint data.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

EMS Technology Solutions, LLCv1.2.4Chrome Web Store
42Risk
Who publishes it

EMS TECHNOLOGY SOLUTIONS, LLC - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
EMS Technology Solutions, LLC
Declared legal entity
EMS TECHNOLOGY SOLUTIONS, LLC
Registered address
3781 TRAMORE POINTE PKWY, AUSTELL, GA 30106, US
Registered contact
Edward Aufderheide

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.2.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 2 November 2026kafpnhpkhahnneolfnkpjfoigfcjafne