Re:Emails a browser extension developer gets from scammers
by agwa on Saturday January 23, 2021 @05:31PM
(#25886741)
It's worse now because browser extensions auto-update which means that when a malicious actor buys an extension they gain access not only to future users but to all current users as well. Also, the Chrome Extension Store publicizes how many users each extension has, which allows malicious actors to operate extremely efficiently as they can easily find extensions to acquire and they know exactly what they're buying.
[ Parent
| on HN ]
Re:Emails a browser extension developer gets from scammers
by sashagim on Saturday January 23, 2021 @05:58PM
(#25886922)
And even worse, because they don’t only hurt performance and usability, but they also report private information. Even is the data is sent anymously, the url itself may contain private information. For instance, Google themselves still allow sharing documents via a “private” link which is then stored on some monitoring service. And some of those services allow anyone access and search these urls for some premium plan.