I built a platform for discovering and sharing Chrome extension collections

Re:I built a platform for discovering and sharing Chrome ext... by richrichardsson on Monday December 23, 2024 @04:08AM (#42492992)

> I found it more trustworthy to code my own extensions

I used to have a ton of little single use extensions that I barely ever used but thought at the time of installation, ”that could be useful one day". Then I started noticing I was liking really random shit on Facebook. That immediately ceased when I uninstalled all but Bitwarden, Leechblock and uBlock Origin. I will never install another random 3rd party extension again

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by collinvandyck76 on Monday December 23, 2024 @04:46AM (#42493152)

Which of your single use extensions was causing you to like things on Facebook?

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by aragonite on Monday December 23, 2024 @05:05AM (#42493254)

Not the GP, but just last week Google automatically removed a single use extension (https://readermode.io) from my browser after flagging it as malware (as I recall the extension updated itself a day before the removal). The extension has also been taken down from the Chrome web store (https://chromewebstore.google.com/detail/reader-mode/llimhhc...) though Google hasn't provided any details about what it was doing that led to the removal.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by nomilk on Monday December 23, 2024 @05:32AM (#42493380)

I think the asymmetry in payoffs explains this, since a bad actor who baits and switches their extension could do massive damage to users. So google try to catch this behaviour and inevitably have some false positives (extensions labelled malware that actually aren't). The cost of a false positive is annoyance. The cost of real malware getting through could be your bank balance.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by hackinthebochs on Monday December 23, 2024 @10:31AM (#42495085)

Automatic extension updates is a stupid practice. The attack surface for a legit extension is minimal, while being huge for a malware update. I'm against almost all automatic software updates in general, but browser extensions take the cake for having an obscene cost/benefit ratio. Chrome won't even let you turn it off. Personally I extract and load all my extensions in developer mode.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by jjeaff on Friday December 27, 2024 @03:19AM (#42520679)

the alternative is leaving software eternally insecure as people will not update them. and of those that will, 99.99% (probably not an exaggeration) will not have the interest, time, or ability to review code changes before updating.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by hackinthebochs on Friday December 27, 2024 @01:14PM (#42524522)

There are some core technologies that should be updated automatically as the cost/benefit is well in favor of updates (by default, but with an option to turn it off). But the fact that we're at the point of all software updating automatically with zero acknowledgement that there is even a cost associated with it is a huge problem. Ostensibly a security practice but now serves as a means for software distributors to extract the maximum value from their users. The pendulum is well overdue for a swing back towards the middle.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by amelius on Monday December 23, 2024 @05:58AM (#42493496)

I heard (on HN) that often an extension changes owners just before turning bad. Curious if that was the case here.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by digitalengineer on Monday December 23, 2024 @03:03PM (#42497174)

Correct! That's why I use "Under new management" https://chromewebstore.google.com/detail/under-new-managemen...

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by freehorse on Monday December 23, 2024 @08:35AM (#42494282)

https://web.archive.org/web/20240927002632/https://chromeweb...

There are several complains in the reviews, though it all seems a bit bizarre in that the issue was with an opt-in so-called "eco-mode" that basically was throwing pop-ups with affiliate links.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by cynicalsecurity on Monday December 23, 2024 @06:01AM (#42493510)

Tons of them. Custom download page, to avoid seeing the old ugly Chrome'a download shelf at the bottom of the screen.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by JadeNB on Monday December 23, 2024 @10:01AM (#42494847)

> Tons of them. Custom download page, to avoid seeing the old ugly Chrome'a download shelf at the bottom of the screen.

Just to make sure—you seem to be replying to https://news.ycombinator.com/item?id=42493152, which currently says:

> Which of your single use extensions was causing you to like things on Facebook?

Are you saying tons of your single-use extensions caused this Facebook liking, and a custom download page was one of them? Or was this meant to be a response to https://news.ycombinator.com/item?id=42492881?

(Or maybe something's wrong with parent links today. For me, on the main page, they are now turning into anchored links that don't seem to go where intended, which wasn't happening yesterday.)

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by richrichardsson on Tuesday December 24, 2024 @03:41AM (#42500565)

I can't answer that question I'm afraid. I disabled somewhere in the region of 5-10 extensions and it would have required more effort than I cared to exert to figure out which was the culprit. This means that I can't categorically state an extension was to blame, but there was a strong correlation between my removing them and the spurious likes stopping.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by antihero on Tuesday December 24, 2024 @04:44PM (#42505155)

I remember this happening when an extension got sold and then stole my Instagram cookies. Absolutely tonnes of likes of weird shit.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by polotics on Monday December 23, 2024 @05:13AM (#42493293)

Haha exactly! Except I didnt bother to publish mine on chromewebstore, it's just on gitlab: https://gitlab.com/natural_aliens/geminiwrap_plugin ...it makes Gemini-Chat voice dictation a bit more useful.

My other one, the remove-youtube-shorts, is almost an one-liner, so I didnt even publish it it's too trivial I think. Everyone just make your own!

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by franze on Monday December 23, 2024 @05:20AM (#42493329)

Yeah, creating the marketing screenshots and filling out the publishing form takes longer nowadays then coding the actual extension.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by polotics on Monday December 23, 2024 @05:26AM (#42493346)

Also if anyone wants to uses an extension I would much rather they make the minuscule effort to create a local folder, put the files in there, and load the extension's folder with the chrome extension mgr. Maybe even they can peek at the source code... I really don't see why I'd have to push my name, address, email etc on some google storefront and submit myself to spam reviews at the big "google-internet" party in the cloud.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by oefrha on Monday December 23, 2024 @06:54AM (#42493763)

I was updating my Chrome Web Store extensions to MV3 the other day. Had to fill a fair bit of new stuff. Then one dead simple extension I haven’t touched in a decade got its update rejected due to “description provided is insufficient to understand the functionality of the item”, even though anyone who bothered to seek it out absolutely would have no trouble understanding what it does (according to analytics on the dashboard, there are a grand total of ~20 active users and a couple hundred throughout its lifetime), never mind what those lay reviewers think. The review process is really dumb.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by dsauerbrun on Monday December 23, 2024 @09:46AM (#42494731)

I'm gonna need the remove youtube shorts one

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by DaSHacka on Monday December 23, 2024 @10:19AM (#42494996)

You can do it natively inside ublock origin if you don't want to install an extra extension (often the case for a surprising number of simple extensions, actually).

I used to block it myself with my own filter, but after YouTube changed things up and broke it I've just been using someone else's filterlist and it works the same.

https://github.com/gijsdev/ublock-hide-yt-shorts

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by vunderba on Monday December 23, 2024 @12:36PM (#42496088)

An extension doesn't make sense for a simple DOM manipulation - I'd recommend installing Tampermonkey then finding a script like the following:

https://github.com/hallzy/remove-youtube-shorts/blob/master/...

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by 77pt77 on Monday December 23, 2024 @10:23AM (#42495020)

But did you "code" them with chatgpt also?

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by amelius on Monday December 23, 2024 @05:14AM (#42493300)

I'm too scared to download extensions, so I use bookmarklets (on Firefox).

But I like your suggestion of using ChatGPT to write extensions.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by RustySpottedCat on Monday December 23, 2024 @06:31AM (#42493649)

Tampermonkey scripts with chatgpt is even faster. Adding a functionality to a website just by pasting the site's html in chatgpt and in 2min I get what I need.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by DaSHacka on Monday December 23, 2024 @10:22AM (#42495014)

Making a simple tool for a site or two is the perfect use case for a userscript manager like TamperMonkey/ViolentMonkey (FOSS alternative), I think making your own extension is somewhat overkill

Easier to share with others, too

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by croes on Monday December 23, 2024 @06:35AM (#42493669)

Your cost but not the cost.

[ Parent | on HN ]

Re:I built a platform for discovering and sharing Chrome ext... by adamredwoods on Tuesday December 24, 2024 @02:10PM (#42504130)

Interesting that extensions are not seen as trustworthy. I installed a third-party one for work, and it kept opening up the developers website which was blocked by our firewall. Why try to do a web action the user didn't request? It devolves trust.

[ Parent | on HN ]