News for hackers. Stuff that matters.

A comment on Private messages from 81,000 hacked Facebook accounts for sale. Parent comment

Re:Private messages from 81,000 hacked Facebook accounts for... by vkou on Friday November 02, 2018 @01:10PM (#18364776)
> 2) Every extension has to provide schema of any data it intends to send out of browser.

Just because I supplied a schema does not mean I'm not exfiltrating sensitive data, in a way that would not be obvious from the logs.

[ Parent | on HN ]
Re:Private messages from 81,000 hacked Facebook accounts for... by petagonoral on Saturday November 03, 2018 @10:38AM (#18370370)
How many extensions _need_ to send data outbound? Before approving extensions for store/signing, the schema can be checked and if it's not tight enough - rejected.
[ Parent | on HN ]