News for hackers. Stuff that matters.
Re:Show HN: Tabbie, a tab manager for Google Chrome by euph0ria on Friday December 30, 2016 @04:55AM (#13283574)
How secure is it to use these types of extensions? Are they able to sniff all my logins etc?
Re:Show HN: Tabbie, a tab manager for Google Chrome by detaro on Friday December 30, 2016 @06:01AM (#13283777)
If you are worried if the installed-through-the-store version is the same so you could just unpack it and compare with the code release. Or pack that yourself and install it, but updates through the store should at least prompt you when the extension asks for more permissions than it currently has.

The current permissions can be seen in the manifest: https://github.com/hharnisc/tabbie/blob/master/manifest.json

The extension can store data (synced if you are logged in to chrome), get metadata about and manipulate your tabs (including the URL, which might be security-relevant), and can call Google Analytics.

Re:Show HN: Tabbie, a tab manager for Google Chrome by euph0ria on Friday December 30, 2016 @06:05AM (#13283792)
Thank you! Exactly the type of answer I was looking for.
Re:Show HN: Tabbie, a tab manager for Google Chrome by red2awn on Friday December 30, 2016 @05:23AM (#13283668)
Dude, it is a open source project. You can have a look at the code.
Re:Show HN: Tabbie, a tab manager for Google Chrome by euph0ria on Friday December 30, 2016 @05:42AM (#13283727)
Doesn't say anything about the compiled product that I download from the Chrome store?
Re:Show HN: Tabbie, a tab manager for Google Chrome by thecloud on Friday December 30, 2016 @06:14AM (#13283815)
actually, you can still inspect the code for the "compiled product" you download from the store- your chrome path contains a directory containing all extensions, finding them is a little bit hard, because they use their keys as foldernames but you can actually still inspect the source

http://stackoverflow.com/questions/14543896/where-does-chrom...

Re:Show HN: Tabbie, a tab manager for Google Chrome by Illniyar on Friday December 30, 2016 @06:02AM (#13283779)
Cant it be compiled and installed manually? Or downloaded and verified?