3 ms·
Couldn't malware authors start from the other direction? Create a no-op extension with no permissions and gradually add things until it's no longer approved.
by bentcorner 6y ago
Couldn't malware authors start from the other direction? Create a no-op extension with no permissions and gradually add things until it's no longer approved.
- IG_Semmelweiss 6y agoNo. This gets you banned.
- mirimir 6y agoIs that really true?
- thejynxed 6y agoOnly years later, as in the case of a certain Vietnamese hacking group that did exactly this starting at the end of 2015 and didn't have their apps yanked until Nov & Dec of 2019 and another batch located & yanked only last month, well after any and all damage was already done to those who used the apps.
- mirimir 6y agoWell, I meant for devs who are doing it innocently ;) The fact that it took four years in your example implies that permission shaving isn't hugely risky for devs.
- labawi 6y agoMalware authors can register a dozen or thousand throwaway accounts (probably not super easy but not hard either). It's the honest developers that get their meaningful accounts banned.