News for hackers. Stuff that matters.

A comment on Chrome extensions are tampering with security headers. Parent comment

Re:Chrome extensions are tampering with security headers by cortesoft on Tuesday May 25, 2021 @09:13PM (#27284943)
What makes those extensions not "potentially malware"? I am assuming it is because you (or someone you trust) vetted them and decided they were trustworthy.

Why wouldn't this same idea apply to any other extension? You are right, everything is potential malware (the two extensions you mentioned included). There is nothing magical about the two extensions you mentioned.

[ Parent | on HN ]
Re:Chrome extensions are tampering with security headers by edoceo on Tuesday May 25, 2021 @09:18PM (#27284979)
UBO is good cause like the whole internet trusts Raymond Hill (gorhill).

And 1000s of eyeballs are on those works.

[ Parent | on HN ]
Re:Chrome extensions are tampering with security headers by lupire on Tuesday May 25, 2021 @09:20PM (#27285009)
Ublock Origin only exists because gorhill's original Ublock became evil due to a critical management mistake onboarding an untrustworthy parry. Everything is a risk.
[ Parent | on HN ]
Re:Chrome extensions are tampering with security headers by dankwizard on Tuesday May 25, 2021 @09:49PM (#27285200)
I'd argue it's getting counter-intuitive though, similar to the bystander effect. Yes it is popular but if everybody thinks everyone else is verifying the source, then no one is.

When is the last time you checked out the UBO Git?

[ Parent | on HN ]
Re:Chrome extensions are tampering with security headers by cortesoft on Tuesday May 25, 2021 @11:53PM (#27286089)
Sure, but the comment I relied to seemed SO sure that those were the only two legitimate extensions. My point was that there might be others that also have built up that level of trust, and to assume that you know the exact list of trustworthy extensions is putting too much confidence in your knowledge of everything.
[ Parent | on HN ]