#browserextensions — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #browserextensions, aggregated by home.social.
-
Mellowtel browser extensions turned home connections into a proxy network, Spur says. See how the SDK works and what Google did.
#Mellowtel #BrowserExtensions #ResidentialProxy #Spur #ChromeSecurity #SDK #ProxyNetwork #PrivacyRisk
https://meterpreter.org/mellowtel-browser-extensions/?utm_source=mastodon&utm_medium=jetpack_social
-
Mellowtel browser extensions turned home connections into a proxy network, Spur says. See how the SDK works and what Google did.
#Mellowtel #BrowserExtensions #ResidentialProxy #Spur #ChromeSecurity #SDK #ProxyNetwork #PrivacyRisk
https://meterpreter.org/mellowtel-browser-extensions/?utm_source=mastodon&utm_medium=jetpack_social
-
Mellowtel browser extensions turned home connections into a proxy network, Spur says. See how the SDK works and what Google did.
#Mellowtel #BrowserExtensions #ResidentialProxy #Spur #ChromeSecurity #SDK #ProxyNetwork #PrivacyRisk
https://meterpreter.org/mellowtel-browser-extensions/?utm_source=mastodon&utm_medium=jetpack_social
-
Экспорт коллекции API‑запросов в файлы для git — и как мы чуть не отправили токены в открытом виде
Как работать с коллекциями в Http API‑клиенте... В клиенте уже год как работал экспорт коллекции как патча — одного JSON‑файла с операциями вида upsertRequest / removeRequest / setCollectionMeta . Достаточно, чтобы переслать коллеге точечное изменение: поправил заголовок в одном запросе — экспортировал — коллега применил патч у себя. Рабочая штука для передачи «из рук в руки». Ниже — история одной конкретной фичи: зачем понадобился «git‑friendly» экспорт коллекции, как устроена стабильная сериализация и разрешение коллизий имён файлов, и какую дыру в защите секретов мы нашли и закрыли по пути. Без сравнений с другими клиентами — только то, что случилось и что мы с этим сделали.
https://habr.com/ru/articles/1088128/
#Httpapiclient #иб #RESTAPICOLLECTION #browserextensions #QAtestapi #APIsecret
-
Экспорт коллекции API‑запросов в файлы для git — и как мы чуть не отправили токены в открытом виде
Как работать с коллекциями в Http API‑клиенте... В клиенте уже год как работал экспорт коллекции как патча — одного JSON‑файла с операциями вида upsertRequest / removeRequest / setCollectionMeta . Достаточно, чтобы переслать коллеге точечное изменение: поправил заголовок в одном запросе — экспортировал — коллега применил патч у себя. Рабочая штука для передачи «из рук в руки». Ниже — история одной конкретной фичи: зачем понадобился «git‑friendly» экспорт коллекции, как устроена стабильная сериализация и разрешение коллизий имён файлов, и какую дыру в защите секретов мы нашли и закрыли по пути. Без сравнений с другими клиентами — только то, что случилось и что мы с этим сделали.
https://habr.com/ru/articles/1088128/
#Httpapiclient #иб #RESTAPICOLLECTION #browserextensions #QAtestapi #APIsecret
-
Page Rage, by @alexreardon.bsky.social:
-
Page Rage, by @alexreardon.bsky.social:
-
Page Rage, by @alexreardon.bsky.social:
-
Page Rage, by @alexreardon.bsky.social:
-
Malware Exploits Browser Flaws to Force Install Malicious Extensions
A sneaky malware operation, tracked as KREMLIN, has infected 1,515 systems, mostly in Brazil, by secretly installing malicious Chrome and Edge extensions that steal sensitive info. This cunning toolkit impersonates banks to trick victims into giving up their credentials and session tokens.
#BrazilianBankingMalware #Kremlin #MalwareOperations #BrowserExtensions #Infostealer
-
Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens
A malicious Twitch extension, known as Twitch Enhanced Viewer | JeetBot, has compromised the live OAuth session tokens of approximately 31,000 users, forwarding them to Russian proxy servers. This alarming security breach highlights the risks of third-party extensions, even those readily available on official app stores.
#Twitch #OauthTokens #RussianBotService #BrowserExtensions #EmergingThreats
-
#LinkedIn beats "BrowserGate" #lawsuits over scanning users' Chrome extensions
LinkedIn beat two lawsuits over its practice of scanning users’ #browserextensions, with a judge granting Microsoft subsidiary’s motion to dismiss cases. Users who sued LinkedIn failed to adequately allege they have standing to sue because neither asserted that they “had browser extensions installed that conveyed private information to LinkedIn,” ruled Judge Vince Chhabria in US District Court
https://arstechnica.com/tech-policy/2026/09/linkedin-beats-browsergate-lawsuits-over-scanning-users-chrome-extensions/ -
#LinkedIn beats "BrowserGate" #lawsuits over scanning users' Chrome extensions
LinkedIn beat two lawsuits over its practice of scanning users’ #browserextensions, with a judge granting Microsoft subsidiary’s motion to dismiss cases. Users who sued LinkedIn failed to adequately allege they have standing to sue because neither asserted that they “had browser extensions installed that conveyed private information to LinkedIn,” ruled Judge Vince Chhabria in US District Court
https://arstechnica.com/tech-policy/2026/09/linkedin-beats-browsergate-lawsuits-over-scanning-users-chrome-extensions/ -
#LinkedIn beats "BrowserGate" #lawsuits over scanning users' Chrome extensions
LinkedIn beat two lawsuits over its practice of scanning users’ #browserextensions, with a judge granting Microsoft subsidiary’s motion to dismiss cases. Users who sued LinkedIn failed to adequately allege they have standing to sue because neither asserted that they “had browser extensions installed that conveyed private information to LinkedIn,” ruled Judge Vince Chhabria in US District Court
https://arstechnica.com/tech-policy/2026/09/linkedin-beats-browsergate-lawsuits-over-scanning-users-chrome-extensions/ -
#LinkedIn beats "BrowserGate" #lawsuits over scanning users' Chrome extensions
LinkedIn beat two lawsuits over its practice of scanning users’ #browserextensions, with a judge granting Microsoft subsidiary’s motion to dismiss cases. Users who sued LinkedIn failed to adequately allege they have standing to sue because neither asserted that they “had browser extensions installed that conveyed private information to LinkedIn,” ruled Judge Vince Chhabria in US District Court
https://arstechnica.com/tech-policy/2026/09/linkedin-beats-browsergate-lawsuits-over-scanning-users-chrome-extensions/ -
Manifest V2 Is Dead as Chrome Web Store Permanently Purges Legacy Extensions, by (not on Mastodon or Bluesky):
-
Manifest V2 Is Dead as Chrome Web Store Permanently Purges Legacy Extensions, by (not on Mastodon or Bluesky):
-
Manifest V2 Is Dead as Chrome Web Store Permanently Purges Legacy Extensions, by (not on Mastodon or Bluesky):
-
Manifest V2 Is Dead as Chrome Web Store Permanently Purges Legacy Extensions, by (not on Mastodon or Bluesky):
-
Malicious Extensions Target Chrome, Edge Users With Crypto-Draining Code
Beware: malicious Chrome extensions have been discovered that can secretly drain your cryptocurrency wallet! Security researchers uncovered a sneaky campaign that uses 19 extensions to steal wallet secrets and drain crypto funds.
#MaliciousExtensions #CryptodrainingCode #Chrome #Edge #BrowserExtensions
-
Socket tracked 77 malicious Firefox extensions that steal crypto wallet secrets and credentials. See how the Offside Wallet Theft Factory works.
#Firefox #CryptoWallet #BrowserExtensions #Malware #Web3Security #InfoSec #Socket
-
Socket tracked 77 malicious Firefox extensions that steal crypto wallet secrets and credentials. See how the Offside Wallet Theft Factory works.
#Firefox #CryptoWallet #BrowserExtensions #Malware #Web3Security #InfoSec #Socket
-
Socket tracked 77 malicious Firefox extensions that steal crypto wallet secrets and credentials. See how the Offside Wallet Theft Factory works.
#Firefox #CryptoWallet #BrowserExtensions #Malware #Web3Security #InfoSec #Socket
-
Researchers built a fake extension designed to steal passwords.
Submitted it to the Chrome Web Store. It passed review on the first try.
-
Researchers built a fake extension designed to steal passwords.
Submitted it to the Chrome Web Store. It passed review on the first try.
-
Researchers built a fake extension designed to steal passwords.
Submitted it to the Chrome Web Store. It passed review on the first try.
-
Researchers built a fake extension designed to steal passwords.
Submitted it to the Chrome Web Store. It passed review on the first try.
-
Lifehacker: Hundreds of Fake VPNs Are Flooding the Chrome Web Store. “Many of these extensions are free, some are paid, and some even pretend to be from trusted cybersecurity providers to lure users into handing over unrestricted access to their network and browser. This weekend, I dug through Socket’s report to find out exactly what was going on with these apps and how they managed to clear […]
https://rbfirehose.com/2026/08/22/lifehacker-hundreds-of-fake-vpns-are-flooding-the-chrome-web-store/ -
Lifehacker: Hundreds of Fake VPNs Are Flooding the Chrome Web Store. “Many of these extensions are free, some are paid, and some even pretend to be from trusted cybersecurity providers to lure users into handing over unrestricted access to their network and browser. This weekend, I dug through Socket’s report to find out exactly what was going on with these apps and how they managed to clear […]
https://rbfirehose.com/2026/08/22/lifehacker-hundreds-of-fake-vpns-are-flooding-the-chrome-web-store/ -
Lifehacker: Hundreds of Fake VPNs Are Flooding the Chrome Web Store. “Many of these extensions are free, some are paid, and some even pretend to be from trusted cybersecurity providers to lure users into handing over unrestricted access to their network and browser. This weekend, I dug through Socket’s report to find out exactly what was going on with these apps and how they managed to clear […]
https://rbfirehose.com/2026/08/22/lifehacker-hundreds-of-fake-vpns-are-flooding-the-chrome-web-store/ -
Lifehacker: Hundreds of Fake VPNs Are Flooding the Chrome Web Store. “Many of these extensions are free, some are paid, and some even pretend to be from trusted cybersecurity providers to lure users into handing over unrestricted access to their network and browser. This weekend, I dug through Socket’s report to find out exactly what was going on with these apps and how they managed to clear […]
https://rbfirehose.com/2026/08/22/lifehacker-hundreds-of-fake-vpns-are-flooding-the-chrome-web-store/ -
🛡️ Cum poți folosi în continuare uBlock Origin pe Vivaldi și navigatoarele bazate pe Chromium! Odată cu eliminarea extinderilor Manifest V2 din magazinul oficial Chromium, celebrul uBlock Origin este dezactivat sau șters automat la repornirea browserului. Cu toate acestea, există încă o metodă manuală de încărcare (sideloading) care îți permite să folosești versiunea completă.✨ Pașii pentru instalare manuală:1️⃣ Descarcă extensia oficială:• Mergi pe pagina oficială de GitHub a proiectului uBlock Origin (la secțiunea Releases) și descarcă arhiva care se termină în .chromium.zip.
• Descomprimă arhiva descărcată într-un folder local pe calculator. 2️⃣ Activează Modul Dezvoltator:• Deschide pagina de extinderi din navigator (ex: vivaldi:extensions sau chrome:extensions) și bifează comutatorul Mod dezvoltator (Developer mode). 3️⃣ Încarcă extensia decomprimată:• Apasă pe butonul Carcă desempachetat (Load unpacked) și selectează folderul unde ai extras anterior arhiva zip. ⚠️ Aspecte importante de reținut:• Deoarece suportul oficial Manifest V2 este eliminat, browserul poate șterge extensia la repornire, fiind necesară reîncărcarea folderului.• Setările sau regulile personalizate se pot reseta, făcând ca extensia să funcționeze ca la prima instalare. O soluție temporară excelentă pentru cei care nu vor să renunțe la controlul complet oferit de uBlock Origin pe motoarele Chromium! 🚀#uBlockOrigin #Chromium #Vivaldi #Privacy #OpenSource #BrowserExtensions #AdBlocker #TechNews #SoftwareLibre -
🛡️ Cum poți folosi în continuare uBlock Origin pe Vivaldi și navigatoarele bazate pe Chromium! Odată cu eliminarea extinderilor Manifest V2 din magazinul oficial Chromium, celebrul uBlock Origin este dezactivat sau șters automat la repornirea browserului. Cu toate acestea, există încă o metodă manuală de încărcare (sideloading) care îți permite să folosești versiunea completă.✨ Pașii pentru instalare manuală:1️⃣ Descarcă extensia oficială:• Mergi pe pagina oficială de GitHub a proiectului uBlock Origin (la secțiunea Releases) și descarcă arhiva care se termină în .chromium.zip.
• Descomprimă arhiva descărcată într-un folder local pe calculator. 2️⃣ Activează Modul Dezvoltator:• Deschide pagina de extinderi din navigator (ex: vivaldi:extensions sau chrome:extensions) și bifează comutatorul Mod dezvoltator (Developer mode). 3️⃣ Încarcă extensia decomprimată:• Apasă pe butonul Carcă desempachetat (Load unpacked) și selectează folderul unde ai extras anterior arhiva zip. ⚠️ Aspecte importante de reținut:• Deoarece suportul oficial Manifest V2 este eliminat, browserul poate șterge extensia la repornire, fiind necesară reîncărcarea folderului.• Setările sau regulile personalizate se pot reseta, făcând ca extensia să funcționeze ca la prima instalare. O soluție temporară excelentă pentru cei care nu vor să renunțe la controlul complet oferit de uBlock Origin pe motoarele Chromium! 🚀#uBlockOrigin #Chromium #Vivaldi #Privacy #OpenSource #BrowserExtensions #AdBlocker #TechNews #SoftwareLibre -
🤖 Kimi K3: Proof that we need #AI to do everything humans are too lazy to do—like clicking on a button to deploy 247 agents. 🚀 Because we totally needed another browser extension to clutter our tabs and crash our systems. 🙄 The #revolution is here, and it's in the form of yet another AI that promises to turn your Excel spreadsheets into Picasso masterpieces. 🎨
https://www.kimi.com/blog/kimi-k3 #BrowserExtensions #ExcelArt #LazyTech #HackerNews #ngated -
🤖 Kimi K3: Proof that we need #AI to do everything humans are too lazy to do—like clicking on a button to deploy 247 agents. 🚀 Because we totally needed another browser extension to clutter our tabs and crash our systems. 🙄 The #revolution is here, and it's in the form of yet another AI that promises to turn your Excel spreadsheets into Picasso masterpieces. 🎨
https://www.kimi.com/blog/kimi-k3 #BrowserExtensions #ExcelArt #LazyTech #HackerNews #ngated -
🤖 Kimi K3: Proof that we need #AI to do everything humans are too lazy to do—like clicking on a button to deploy 247 agents. 🚀 Because we totally needed another browser extension to clutter our tabs and crash our systems. 🙄 The #revolution is here, and it's in the form of yet another AI that promises to turn your Excel spreadsheets into Picasso masterpieces. 🎨
https://www.kimi.com/blog/kimi-k3 #BrowserExtensions #ExcelArt #LazyTech #HackerNews #ngated -
🤖 Kimi K3: Proof that we need #AI to do everything humans are too lazy to do—like clicking on a button to deploy 247 agents. 🚀 Because we totally needed another browser extension to clutter our tabs and crash our systems. 🙄 The #revolution is here, and it's in the form of yet another AI that promises to turn your Excel spreadsheets into Picasso masterpieces. 🎨
https://www.kimi.com/blog/kimi-k3 #BrowserExtensions #ExcelArt #LazyTech #HackerNews #ngated -
Implementing reliable page manipulations using a web browser extension in the age of single-page "apps" and client-side JavaScript feels a lot like playing rounds of Assault through the obstacle course of the HTML DOM.
#AmericanGladiators #ModernWebDevelopment #BrowserExtensions
Flawless Accuracy In Event Ass... -
Discover how the ModHeader hidden tracking mechanism caused Google and Microsoft to remove the tool. Protect your data from this concealed browser threat.
#ModHeader #CyberSecurity #DataPrivacy #Malware #BrowserExtensions
https://meterpreter.org/modheader-hidden-tracking/?utm_source=mastodon&utm_medium=jetpack_social
-
Discover how the ModHeader hidden tracking mechanism caused Google and Microsoft to remove the tool. Protect your data from this concealed browser threat.
#ModHeader #CyberSecurity #DataPrivacy #Malware #BrowserExtensions
https://meterpreter.org/modheader-hidden-tracking/?utm_source=mastodon&utm_medium=jetpack_social
-
Cookie Guardian in Chrome store has a public GitHub repository, but, open-source?
Google, you are featuring this extension, right?
https://chromewebstore.google.com/detail/cookie-guardian-auto-dele/gnoaanpbfnjakaddkecnnamnfkebhgle
-
MakeUseOf: Google’s latest updates for Chrome extensions are a big boon for privacy. “On July 1, Google announced some significant changes to the Chrome Web Store’s policies. These changes will impact Chrome extensions in several key ways, but the primary focus is on enhancing user privacy.”
https://rbfirehose.com/2026/07/04/makeuseof-googles-latest-updates-for-chrome-extensions-are-a-big-boon-for-privacy/ -
MakeUseOf: Google’s latest updates for Chrome extensions are a big boon for privacy. “On July 1, Google announced some significant changes to the Chrome Web Store’s policies. These changes will impact Chrome extensions in several key ways, but the primary focus is on enhancing user privacy.”
https://rbfirehose.com/2026/07/04/makeuseof-googles-latest-updates-for-chrome-extensions-are-a-big-boon-for-privacy/ -
MakeUseOf: Google’s latest updates for Chrome extensions are a big boon for privacy. “On July 1, Google announced some significant changes to the Chrome Web Store’s policies. These changes will impact Chrome extensions in several key ways, but the primary focus is on enhancing user privacy.”
https://rbfirehose.com/2026/07/04/makeuseof-googles-latest-updates-for-chrome-extensions-are-a-big-boon-for-privacy/ -
MakeUseOf: Google’s latest updates for Chrome extensions are a big boon for privacy. “On July 1, Google announced some significant changes to the Chrome Web Store’s policies. These changes will impact Chrome extensions in several key ways, but the primary focus is on enhancing user privacy.”
https://rbfirehose.com/2026/07/04/makeuseof-googles-latest-updates-for-chrome-extensions-are-a-big-boon-for-privacy/ -
Microsoft removed 119 malicious Edge extensions in the StegoAd campaign that hid code with steganography to steal credentials and commit ad fraud.
#StegoAd #MicrosoftEdge #BrowserExtensions #Steganography #Malware
-
Microsoft removed 119 malicious Edge extensions in the StegoAd campaign that hid code with steganography to steal credentials and commit ad fraud.
#StegoAd #MicrosoftEdge #BrowserExtensions #Steganography #Malware
-
Google to End Manifest V2 Support in Chrome, Disabling uBlock Origin and Other Ad Blockers, by (not on Mastodon or Bluesky):
-
Google to End Manifest V2 Support in Chrome, Disabling uBlock Origin and Other Ad Blockers, by (not on Mastodon or Bluesky):
-
Google to End Manifest V2 Support in Chrome, Disabling uBlock Origin and Other Ad Blockers, by (not on Mastodon or Bluesky):
-
Google to End Manifest V2 Support in Chrome, Disabling uBlock Origin and Other Ad Blockers, by (not on Mastodon or Bluesky):
-
uBlock Origin: Die letzten #Chrome-Workarounds fallen | iX Magazin https://www.heise.de/news/uBlock-Origin-Die-letzten-Chrome-Workarounds-fallen-11327170.html #ManifestV2 #ManifestV3 #Chromium #GoogleChrome #Browser #Webbrowser #BrowserExtensions #BrowserExtensions
-
uBlock Origin: Die letzten #Chrome-Workarounds fallen | iX Magazin https://www.heise.de/news/uBlock-Origin-Die-letzten-Chrome-Workarounds-fallen-11327170.html #ManifestV2 #ManifestV3 #Chromium #GoogleChrome #Browser #Webbrowser #BrowserExtensions #BrowserExtensions
-
uBlock Origin: Die letzten #Chrome-Workarounds fallen | iX Magazin https://www.heise.de/news/uBlock-Origin-Die-letzten-Chrome-Workarounds-fallen-11327170.html #ManifestV2 #ManifestV3 #Chromium #GoogleChrome #Browser #Webbrowser #BrowserExtensions #BrowserExtensions
-
PetaPixel: New Chrome Extension Brings Batch Editing to Google Photos. “According to creator Yair Levin, the idea for Batch for Google Photos came from a familiar frustration after returning from a family trip with hundreds of smartphone photos that needed the same adjustments before being shared with relatives.”
https://rbfirehose.com/2026/06/09/petapixel-new-chrome-extension-brings-batch-editing-to-google-photos/ -
PetaPixel: New Chrome Extension Brings Batch Editing to Google Photos. “According to creator Yair Levin, the idea for Batch for Google Photos came from a familiar frustration after returning from a family trip with hundreds of smartphone photos that needed the same adjustments before being shared with relatives.”
https://rbfirehose.com/2026/06/09/petapixel-new-chrome-extension-brings-batch-editing-to-google-photos/ -
PetaPixel: New Chrome Extension Brings Batch Editing to Google Photos. “According to creator Yair Levin, the idea for Batch for Google Photos came from a familiar frustration after returning from a family trip with hundreds of smartphone photos that needed the same adjustments before being shared with relatives.”
https://rbfirehose.com/2026/06/09/petapixel-new-chrome-extension-brings-batch-editing-to-google-photos/ -
PetaPixel: New Chrome Extension Brings Batch Editing to Google Photos. “According to creator Yair Levin, the idea for Batch for Google Photos came from a familiar frustration after returning from a family trip with hundreds of smartphone photos that needed the same adjustments before being shared with relatives.”
https://rbfirehose.com/2026/06/09/petapixel-new-chrome-extension-brings-batch-editing-to-google-photos/ -
Drupal 11: Building A Link Directory: Part 2
A look at an alternative approach to generating screenshots for a custom link directory. This uses a combination of a REST API in Drupal and a browser extension to generate the images.
https://www.hashbangcode.com/article/drupal-11-building-link-directory-part-2
#drupal #drupalDevelopment #drupal11 #browserExtensions #javascript -
Drupal 11: Building A Link Directory: Part 2
A look at an alternative approach to generating screenshots for a custom link directory. This uses a combination of a REST API in Drupal and a browser extension to generate the images.
https://www.hashbangcode.com/article/drupal-11-building-link-directory-part-2
#drupal #drupalDevelopment #drupal11 #browserExtensions #javascript