Massive spying on users of Google's Chrome shows new security weakness

Re:Massive spying on users of Google's Chrome shows new secu... by matheusmoreira on Thursday June 18, 2020 @06:58AM (#23561878)

I monitor the issue tracker and explore the source code from time to time. The developer posts on HN and seems to be committed to the project and everything it stands for.

I'm not sure if builds are reproducible though. I don't think the author would allow the extensions to be hijacked by malicious actors but it'd still be nice to be able to verify a packaged extension was built from a given git commit.

[ Parent | on HN ]

Re:Massive spying on users of Google's Chrome shows new secu... by Crespyl on Thursday June 18, 2020 @10:36AM (#23563474)

Reproducible builds for extensions is a good idea that I hadn't considered before.

Most browser extensions these days are just some JS zipped up with some metadata and maybe a few assets, right?

There might be trouble with minified JS, but I'd assume most optimizers/minifiers are either deterministic or could be configured that way.

[ Parent | on HN ]