5 ms·
Are outdated Chrome extensions really attack vectors? They're very sandboxed. I'd be way more concerned about the update itself being malicious, especially for
by harkinian 3y ago
Are outdated Chrome extensions really attack vectors? They're very sandboxed. I'd be way more concerned about the update itself being malicious, especially for simple extensions that shouldn't really need updates.
- Chabsff 3y agoPedantically, outdated Chrome extensions make for a poor attack vector in the first place because the majority of users get automatic updates, including being disabled/removed by Google themselves if the dev is gone and a problem is found.
- harkinian 3y agoYeah, I meant if they weren't automatic. Or to make things less theoretical, how often do extension devs currently find and patch security flaws?