4 ms·
In chrome, you can block network traffic coming from extensions. I built an open-source extension you can check out that does that [1] 1: https://chrome.google
by npace12 3y ago
In chrome, you can block network traffic coming from extensions. I built an open-source extension you can check out that does that [1]
1: https://chrome.google.com/webstore/detail/little-rat/oiopkpalpilladnibecobcecijffaflf https://chrome.google.com/webstore/detail/little-rat/oiopkpa...
- hedora 3y agoIsn't the more common problem that the extension contains malware from Google/FB? (This is definitely the case for phone apps.) How do you deal with side channels when the page is running javascript that's being served by the attacker? (Little Rat sounds like a great tool; I've been meaning to check it out.)
- npace12 3y agofor that, you can use ublock. Little Rat can block any traffic originating from a chrome extension. That includes content scripts injected by extensions into webpages, but not sites that you loaded.
- hedora 3y agoI see. That’s pretty good. So, now the attack surface is reduced to the extension author exfiltrating data via burner domains that aren’t blocked by ublock, but that are explicitly added to legitimate web sites.
- thrdbndndn 3y agoNice extension! I installed the full version, but I have no idea what the speaker icon do. Would you mind to explain a little bit more?
- NikkiA 3y agoI think it just mutes reporting on that extension. I'm a little puzzled why we only get the speaker icon, yet the screenshots all show the blocking options.
- npace12 3y agospeaker is for muting the alerts so they don't show red badge for that extension the chrome store version only has blocking. if you install it from github you get all the other options
- NikkiA 3y agoI'm installed from github, I only see the speakers screen shot: https://i.imgur.com/eE06GBY.png https://i.imgur.com/eE06GBY.png
- npace12 3y agointeresting, are you sure you got the latest from the main branch? that looks like an old version
- NikkiA 3y agoIt says 1.0 in the extensions manager, but it was downloaded fresh this evening by clicking on the 'ZIP' link in your readme.md on here: https://github.com/dnakov/little-rat/tree/main https://github.com/dnakov/little-rat/tree/main edit, aha, downloaded the .zip manually rather than via the link, and it has the other icons now, I guess the 'ZIP' link pointing at archive/refs/main results in an older version
- npace12 3y agoahh thanks, i'll update the link
- deleted 3y ago[deleted]
- wintermutestwin 3y agoIs there something like this for Firefox?
- duskwuff 3y agoThere is not. For better or worse, network traffic from browser extensions in Firefox is not visible to other extensions.