News for hackers. Stuff that matters.

A comment on Massive spying on users of Google's Chrome shows new security weakness. Parent comment

Re:Massive spying on users of Google's Chrome shows new secu... by kekebo on Thursday June 18, 2020 @09:01AM (#23562663)
Ghostery is even a recommended Addon on AMO [1].

What would really be practical were some kind of extension analyzer/profiler that runs newly installed addons in a sandbox and displays attempted connections and payloads. Or a mode where connections need to be whitelisted, to limit the impact of silent addon takeovers.

Too many times I find myself having to download, unpack, and skim through an addon's source to make sure it's not doing anything malicious under the hood.

[1] https://addons.mozilla.org/en-US/firefox/addon/ghostery/

[ Parent | on HN ]
Re:Massive spying on users of Google's Chrome shows new secu... by sergeykish on Thursday June 18, 2020 @09:39AM (#23562988)
They state it in plain site. Sadly it is not advertised clearly.

Yes, that would be good. I would love to hear that someone I trust checked latest version. If enough people joined we can make distribution.

And, hey! It is MPL-2 [1], bad defaults can be patched.

[1] https://github.com/ghostery/ghostery-extension

[ Parent | on HN ]