News for hackers. Stuff that matters.

A comment on Emails a browser extension developer gets from scammers. Parent comment

Re:Emails a browser extension developer gets from scammers by JoshTriplett on Sunday January 24, 2021 @02:03AM (#25889972)
> We used to have real extension frameworks

Those "real extension frameworks" had even more permissions, often to run arbitrary local code as the user.

[ Parent | on HN ]
Re:Emails a browser extension developer gets from scammers by craig131 on Sunday January 24, 2021 @04:33AM (#25890644)
Browser extensions can still run local code as the user. Example of a Chrome extension loading an arbitrary .dll: https://twitter.com/evilsocket/status/1339566046265696256
[ Parent | on HN ]