News for hackers. Stuff that matters.
Re:Let's guess what Google requires in 14 days or they kill ... by brosirmandude on Thursday May 14, 2020 @08:12AM (#23178506)
>if you have an approved extension with https://*/* permissions and active users, malware authors will offer to buy your extension for a very high price.

This is interesting, and I didn't realize this was a thing.

Are there any lists of extensions with these permissions, or ways that as an average consumer could easily audit my list of extensions for this?

Re:Let's guess what Google requires in 14 days or they kill ... by Svenskunganka on Thursday May 14, 2020 @09:53AM (#23179480)
I'm using Firefox and all I have to do to view permissions for an extension is to go to about:addons and click an extension, and there will be a "Permissions"-tab that lists what permissions this extension requests. It's similar in Google Chrome IIRC. Other than that, both browsers lists the permissions an extension requests when installing the extension, and further when the extension requests new permissions.