Extensions load unknown sites into invisible Windows. What could go wrong?

List of affected extensions: https://docs.google.com/spreadsheets/d/e/2PACX-1vT1XgBs25gRlg5e3nYCAff967WMtZZTO-TB3rR9zszaJpTpCVFg8j7FkBxnHb3tw3aHGjKBGSxYyLgV/pubhtml

all 9 comments

sorted by: hot top controversial new old
[–] 20 points 1 year ago

The common thread among all of them: They incorporate MellowTel-js, an open source JavaScript library that allows developers to monetize their extensions.

  • source
  • [–] 12 points 1 year ago (2 children)
  • [–] 8 points 1 year ago

    This is why im extremely careful using browser extensions. The access they have is pretty wide as far as software goes these days. So many people install malicious ones without thinking.

  • source
  • [–] 3 points 1 year ago

    Dark Reader for edge is on here but the Firefox one isn't listed so I'm good there i guess? Super sad i had to uninstall my cat fact extensions. It was nice to have instant access to cat facts in the menu bar.

  • source
  • [–] 2 points 1 year ago

    You can check if you have an affected extension installed by going to the mellowtel settings page, where you can configure mellowtel if its installed (or get a message that you don't run mellowtel): https://www.mellow.tel/user-control

  • source
  • [–] 1 point 1 year ago

    a lot of these seem to be accessibility extensions.

    how nice, preying on the disabled

  • source