Veganism Social

HackerNews VN botTin tức đáng chú ý: Một startup đang bị nghi ngờ sử dụng các tiện ích mở rộng của trình duyệt Chrome để tạo ra mạng botnet. Đây là một cảnh báo an ninh mạng nghiêm trọng, cho thấy tầm quan trọng của việc cẩn trọng khi cài đặt các extension.<a href="https://mastodon.maobui.com/tags/Botnet" class="mention hashtag" rel="nofollow noopener" target="_blank">#Botnet</a> <a href="https://mastodon.maobui.com/tags/ChromeExtensions" class="mention hashtag" rel="nofollow noopener" target="_blank">#ChromeExtensions</a> <a href="https://mastodon.maobui.com/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://mastodon.maobui.com/tags/SecurityAlert" class="mention hashtag" rel="nofollow noopener" target="_blank">#SecurityAlert</a> <a href="https://mastodon.maobui.com/tags/Startup" class="mention hashtag" rel="nofollow noopener" target="_blank">#Startup</a> <a href="https://mastodon.maobui.com/tags/AnNinhMang" class="mention hashtag" rel="nofollow noopener" target="_blank">#AnNinhMang</a> <a href="https://mastodon.maobui.com/tags/Ti%E1%BB%87n%C3%8DchChrome" class="mention hashtag" rel="nofollow noopener" target="_blank">#TiệnÍchChrome</a> <a href="https://mastodon.maobui.com/tags/C%E1%BA%A3nhB%C3%A1oAnNinh" class="mention hashtag" rel="nofollow noopener" target="_blank">#CảnhBáoAnNinh</a> <a href="https://mastodon.maobui.com/tags/Kh%E1%BB%9FiNghi%E1%BB%87p" class="mention hashtag" rel="nofollow noopener" target="_blank">#KhởiNghiệp</a><a href="https://www.youtube.com/watch?v=r3NDk9UuPK8" rel="nofollow noopener" translate="no" target="_blank">https://www.youtube.com/watch?v=r3NDk9UuPK8</a>

nemo™ 🇺🇦🚨 Over 90 Chrome extensions—including big names like Avast, Trust Wallet & Browsec VPN—were found leaking sensitive data & credentials! 🕵️‍♂️🔑 Millions at risk from hardcoded secrets & unencrypted traffic. Stay safe & review your extensions! Read more 👉 <a href="https://cyberinsider.com/over-90-chrome-extensions-found-exposing-sensitive-data-and-credentials/" rel="nofollow noopener" translate="no" target="_blank">https://cyberinsider.com/over-90-chrome-extensions-found-exposing-sensitive-data-and-credentials/</a> <a href="https://mas.to/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mas.to/tags/ChromeExtensions" class="mention hashtag" rel="nofollow noopener" target="_blank">#ChromeExtensions</a> <a href="https://mas.to/tags/DataLeak" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataLeak</a> <a href="https://mas.to/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://mas.to/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a> <a href="https://mas.to/tags/newz" class="mention hashtag" rel="nofollow noopener" target="_blank">#newz</a>

Yellow FlagI meant to publish a rant about Google and Chrome Web Store for a while now, and now it is out: <a href="https://palant.info/2025/01/13/chrome-web-store-is-a-mess/" rel="nofollow noopener" translate="no" target="_blank">https://palant.info/2025/01/13/chrome-web-store-is-a-mess/</a>This details many of Google’s shortcoming at keeping Chrome Web Store safe, with the conclusion: “for the end users the result is a huge (and rather dangerous) mess.”I am explaining how Google handled (or rather didn’t handle for most part) my recent reports. How they make reporting problematic extensions extremely hard and then keep reporters in the dark about the state of these reports. How Google repeatedly chose to ignore their own policies and allowed shady, spammy and sometimes outright malicious extensions to prevail.There is some text here on the completely meaningless “Featured” badge that is more likely to be awarded to malicious extensions than to legitimate ones. And how user reviews aren’t allowing informed decisions either because Google will allow even the most obvious fakes to remain.I’ve also decided to publish a guest post by a researcher who wanted to remain anonymous: <a href="https://palant.info/2025/01/13/biscience-collecting-browsing-history-under-false-pretenses/" rel="nofollow noopener" translate="no" target="_blank">https://palant.info/2025/01/13/biscience-collecting-browsing-history-under-false-pretenses/</a>This post provides more details on BIScience Ltd., another company selling browsing data of extension users. <a href="https://infosec.exchange/@tuckner" class="u-url mention" rel="nofollow noopener" target="_blank">@tuckner</a> and I wrote a bit about that one recently, but this has been going on since at least 2019 apparently. Google allows it as long as extension authors claim (not very convincingly) that this data collection is necessary for the extension’s functionality. It’s not that Google doesn’t have policies that would prohibit it, yet Google chooses not to enforce those.<a href="https://infosec.exchange/tags/google" class="mention hashtag" rel="nofollow noopener" target="_blank">#google</a> <a href="https://infosec.exchange/tags/cws" class="mention hashtag" rel="nofollow noopener" target="_blank">#cws</a> <a href="https://infosec.exchange/tags/ChromeExtensions" class="mention hashtag" rel="nofollow noopener" target="_blank">#ChromeExtensions</a> <a href="https://infosec.exchange/tags/privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#privacy</a> <a href="https://infosec.exchange/tags/ChromeWebStore" class="mention hashtag" rel="nofollow noopener" target="_blank">#ChromeWebStore</a>

Recent searches

Search options

Administered by:

Server stats:

#chromeextensions