Is Operative IQ Finger Print Reader Plugin safe?
Operative IQ Finger Print Reader Plugin sends biometric fingerprint data to any cross-origin frame via wildcard postMessage on all pages.
The extension runs a content script on all URLs that listens for a 'startFingerPrint' DOM event, which any webpage can dispatch without restriction. When triggered, it reads from a locally installed native fingerprint reader (com.operativeiq.fingerprint) and relays the raw byte array back to the page using window.postMessage with a wildcard target origin ('*'). This means any cross-origin iframe on the same page can receive the biometric fingerprint data.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itEMS TECHNOLOGY SOLUTIONS, LLC - no other listings under this identity
EMS TECHNOLOGY SOLUTIONS, LLC - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.2.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging