News for hackers. Stuff that matters.

A comment on Malware in the browser: how you might get hacked by a Chrome extension.

Re:Malware in the browser: how you might get hacked by a Chr... by gnicholas on Tuesday July 19, 2016 @12:28AM (#12119662)
My company has a Chrome/Firefox extension with ~60k users. We have been approached repeatedly by companies that want us to add in their tracking snippet to our extension. What they offered—tens of thousands of dollars every year—was tempting, but we didn't take the bait.

They were opaque with us about what the code did (they didn't share the actual code without NDA, and we never got that far). But I did get to see the snippet they wanted us to add to our privacy policy, which was devilishly opaque. It arguably disclosed everything that would be done, but it did so in a way that sounded very benign.

I googled some phrases from the privacy policy insert and found that they had in fact gotten several extensions to include the code. Scary.

[ Parent | on HN ]
Re:Malware in the browser: how you might get hacked by a Chr... by JadeNB on Wednesday July 20, 2016 @03:37PM (#12131824)
> I googled some phrases from the privacy policy insert and found that they had in fact gotten several extensions to include the code. Scary.

Could you share those phrases, so that we can do the same Googling?

[ Parent | on HN ]
Re:Malware in the browser: how you might get hacked by a Chr... by gnicholas on Wednesday July 20, 2016 @05:40PM (#12132745)
Looks like someone already did: https://www.reddit.com/r/programming/comments/3tgiaj/chrome_...

Leave off "site:chrome.google.com" and see a few more results. Looks like they don't have many takers these days (or have updated their privacy insert to make it harder to find them all).

[ Parent | on HN ]