Why browser extension games need access to all websites
From npub1q94eqat20yhc9sm7xjkswpn45yrta22qru9wac8ua7566exa9z8s9gtm7y (npub1q94…tm7y)
Browser extension games requesting potentially dangerous permissions in the browser, to include search hijacking and code injection.
Apparently many of these extensions are benign (in the sense the malicious code doesn't run initially) at first, but have placeholder code for future potentially malicious updates. Yikes.
#cybersecurity #infosec #security #malware #opsec
https://palant.info/2023/06/14/why-browser-extension-games-need-access-to-all-websites/
Avoid The Hack! /
npub1vk…7w6p2
2023-06-26 17:03:31
Author Public Key
npub1vkypeczpkdeu63xx5qdm4sl775wkcdkgmxsw88cyjzcemztwrm6sd7w6p2Published at
2023-06-26 17:03:31Event JSON
{
"id": "0547578cc04e66a8acf46602ade0e3d71909f55bd23493ed8deb1e74add2d961",
"pubkey": "65881ce041b373cd44c6a01bbac3fef51d6c36c8d9a0e39f0490b19d896e1ef5",
"created_at": 1687799011,
"kind": 1,
"tags": [
[
"p",
"016b90756a792f82c37e34ad070675a106bea9401f0aeee0fcefa9ad64dd288f",
"wss://relay.mostr.pub"
],
[
"p",
"2bc45a4a0996e5c131a30296af731f6858c832f5d2f06f973fc9ae42ec2a0643",
"wss://relay.mostr.pub"
],
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"security"
],
[
"t",
"malware"
],
[
"t",
"opsec"
],
[
"mostr",
"https://mastodon.social/users/avoidthehack/statuses/110611596012095474"
]
],
"content": "Why browser extension games need access to all websites \n\nFrom nostr:npub1q94eqat20yhc9sm7xjkswpn45yrta22qru9wac8ua7566exa9z8s9gtm7y \n\nBrowser extension games requesting potentially dangerous permissions in the browser, to include search hijacking and code injection.\n\nApparently many of these extensions are benign (in the sense the malicious code doesn't run initially) at first, but have placeholder code for future potentially malicious updates. Yikes.\n\n#cybersecurity #infosec #security #malware #opsec\n\nhttps://palant.info/2023/06/14/why-browser-extension-games-need-access-to-all-websites/",
"sig": "5f72e9d841ed9239e0cbe66855f83f048319820290abde33c5dce434e270904dce3e6524b837743c7cf1744b19b3de5577264325431a5a85646e9ffdc29b916c"
}