All Questions
12 questions
2
votes
0
answers
282
views
What is the threat-model of a malicious browser-extension accessing the data of *another browser-extension* that is security-critical?
Modern password-managers are moving towards a "fully-in-the-browser" model (see: historical RCE on LastPass, and now 1Password is also moving towards 1Password X as "the future" ...
- 285
38
votes
1
answer
7k
views
Can a browser extension (Chrome, Firefox, etc.) read the web console log?
I realized that my bank handles sensitive information in the web console log, so my concern is if any browser extension could read the log?
- 499
8
votes
3
answers
2k
views
Browser setups to stay safe from malware and unwanted stuff
I have to set up a browser to surf the internet. I'm trying to stay safe from malware as much as possible. (I already know that there's no way to stay 100% safe.)
My idea is to use Firefox with these ...
- 83
11
votes
1
answer
1k
views
Danger of browser extension without any permissions?
Assuming that an extension for Firefox or Chrome does not request any WebExtensions permission, what harm could this extension do?
Or put another way: What (potentially malicious) actions can an ...
- 29.8k
64
votes
6
answers
13k
views
Are there objective reasons to not allow Google Chrome extensions, but to allow Firefox extensions?
Recently, the company I work for has forbidden usage of any extensions in Chrome. They also do not allow account sync. This affected virtually all Web developers since they use Chrome to test their ...
- 2,193
1
vote
0
answers
460
views
Check if a Websocket connection origins from a Chrome extension [closed]
I am writing an application that communicates with a Chrome extension via websocket connection. I wonder if there is a way to detect whether the connection actually origins from the extension. The ...
- 252
1
vote
1
answer
3k
views
Can my computer be compromised by uBlock/Adblock filter list?
uBlock is open source and suppose I trust the author. But filter lists are something that is maintained by other people. Is it possible to add something to a filter list to compromise computer/browser,...
- 715
3
votes
1
answer
218
views
How secure is our privacy when using third party addons and extensions?
I use many addons and extensions in my browsers some of it is for ad blocking, taking screen shots and VPNs. This question came to my mind while using free VPN addons. I usually uses VPN addons for ...
- 569
5
votes
2
answers
738
views
LastPass vulnerability: Should LastPass users change all their passwords?
Reading about the recent vulnerability in LastPass extensions for FireFox and Chrome. The published exploit allows arbitrary code execution. The vulnerability also allowed access to stored passwords. ...
- 6,923
2
votes
2
answers
3k
views
Firefox vs. Chrome extensions: Which are---ceteris paribus---more secure?
As an 'extension' to earlier questions on this topic (for instance here and here),
What makes Firefox extensions (appear) more secure than Chrome extensions?
Do they just appear to be more secure, or ...
32
votes
3
answers
5k
views
Are official browser add-ons really safe?
Almost any browser addon/extension that I install on my Chrome or Firefox (be it Firebug, RESTClient, ...) warns me, saying:
It [the add-on] can:
Access your data on all website
Access ...
- 841
12
votes
3
answers
5k
views
Any tool for scanning vulnerabilities in browser extensions? [closed]
I am scanning browser extensions of Chrome and Firefox for vulnerabilities. Is there any tool which would help me do this?
- 4,372