11 ms·
If you look at all the threat vectors of a browser from a user perspective, a rogue extension is well at the lower end. If you look at the threat vectors for t
by AnonymousPlanet 2mo ago
If you look at all the threat vectors of a browser from a user perspective, a rogue extension is well at the lower end.
If you look at the threat vectors for the revenue of a company like Google, extensions that aren't limited by the browser are pretty much number one.
This should tell you everything you need about the matter.
- jimmydorry 2mo agoIf you've run a site with CORS reporting enabled, you'd see that a significant fraction of your userbase have malware extensions running (prior to manifest v3). I was absolutely shocked when I looked at the logs a decade ago, and I bet the problem is far worse these days with the proliferation of malware buyouts of legit extensions. Google has no shortage of options for serving up ads that can't be blocked by normal ad blockers across all their properties (youtube, search, etc.). They in-line the ads these days! And if they really cared about the fraction of a fraction of a percent of people that even install any kind of adblocker, they could make the served ad content un-blockable by serving it the exact same as the content.