Skip to main content

Ugh, the #chrome #extension ecosystem is exactly as bad as I'd expect.

And the fact extension is still up claiming not to collect any data even if it has been called out in one of the biggest security newsletters shows how much Google care about this (not much). The only thing they care about is pretending to ship AI features to detect malicious extensions. Because that's how you get promoted.

I mean is it even possible to report a suspicious or bad extension? I don't see anywhere

Great research by @WPalant and @c0m4r

And @campuscodi for putting the spotlight on it.

Text from screenshot: Chrome extension turns malicious: A popular Google Chrome extension with more than 100,000 installs has now turned malicious. The Hide YouTube Shorts extension is performing affiliate fraud and collecting the browsing history of all its users. Security researchers say the extension appears to have turned malicious after it was transferred to a new developer.
Text in screenshot from the extension store: Privacy The developer has disclosed that it will not collect or use your data. This developer declares that your data is Not being sold to third parties, outside of the approved use cases Not being used or transferred for purposes that are unrelated to the item's core functionality Not being used or transferred to determine creditworthiness or for lending purposes
#extension #chrome @Yellow Flag @Catalin Cimpanu @c0m4r
in reply to Gabriel N

Hubert Figuière
Hubert Figuière
• •

the worst is that you can block "Shorts" with an uBlock Origin rules. No need of a new extension.

Oh wait...

⇧