News for hackers. Stuff that matters.

A comment on Massive spying on users of Google's Chrome shows new security weakness. Parent comment

Re:Massive spying on users of Google's Chrome shows new secu... by porker on Thursday June 18, 2020 @05:15AM (#23561299)
Is there a list of extensions that have been caught exfiltrating data?

I look at the 20 I've got installed and wonder which are using the "Access to every website" permission for their own ends.

[ Parent | on HN ]
Re:Massive spying on users of Google's Chrome shows new secu... by inglor on Thursday June 18, 2020 @05:33AM (#23561411)
As a maintainer of an extension with said permission I think it's important to acknowledge some extensions do need said permission.

For example at the extension I help maintain (Testim Editor) we literally do test automation which requires elevated permissions.

[ Parent | on HN ]
Re:Massive spying on users of Google's Chrome shows new secu... by sergeykish on Thursday June 18, 2020 @07:50AM (#23562161)
Caught extensions would be automatically disabled, right?

Check Privacy Policy, if none exists it is either clear or non conformant. Extensions which states they collect data are not removed - for example Stylish, Web of Trust.

[ Parent | on HN ]