Bob Jamieson · @bobjmsn
1222 followers · 20080 posts · Server mastodon.scot

Malwarebytes Labs
Password-stealing Chrome extension smuggled on to Web Store

Posted: September 5, 2023 by Mark Stockley

Researchers at the University of Wisconsin–Madison have demonstrated that Chrome browser extensions can steal passwords from the text input fields in websites, even if the extension is compliant with Chrome's latest security and privacy standard, Manifest V3.

malwarebytes.com/blog/news/202

#malware #chrome #browserextensions #passwordcollecting

Last updated 1 year ago

Does anyone use any to enhance their Mastodon Experience? If so, which ones and why?

One thing I've found *slightly* frustrating is that, should I ever find myself on another instance, there's a whole process to getting to a post from my home instance. I'd really something simple like an automatic redirect to the post on my own instance or something that makes the buttons work on other instances :twilightblush:

It's a mild inconvenience at worst, but it would be handy to have a workaround

#browserextensions

Last updated 1 year ago

Marcel SIneM(S)US · @simsus
214 followers · 5271 posts · Server social.tchncs.de
Marcel SIneM(S)US · @simsus
214 followers · 5138 posts · Server social.tchncs.de
Kyle Nazario · @kn
27 followers · 246 posts · Server hachyderm.io

Updated my cross-browser extension template with Svelte 4 and a React template as well!

Love doing a little Sunday open source work

github.com/kyle-n/WebExtension

#opensource #webdev #webextensions #chrome #firefox #safari #iosdev #mac #browserextensions #react

Last updated 1 year ago

Kyle Nazario · @kn
26 followers · 237 posts · Server hachyderm.io

Are you developing a browser extension? Try WebExtensionTemplate, a ready-to-fork project for writing cross-browser extensions in TypeScript and Svelte

github.com/kyle-n/WebExtension

#opensource #webdev #webextensions #chrome #firefox #safari #iosdev #mac #browserextensions

Last updated 1 year ago

Kyle Nazario · @kn
25 followers · 226 posts · Server hachyderm.io

Thinking about open-sourcing a template for cross-browser extensions. It would:

- Run on Chrome, Firefox and Safari
- Transpile TypeScript to minified JS
- Include build scripts that do the bundling for all three app stores

Any interest in this?

#webkit #webdev #webextensions #browserextensions #chrome #firefox #safari

Last updated 1 year ago

Gonçalo Valério · @dethos
312 followers · 1334 posts · Server s.ovalerio.net
CryptoNewsBot · @cryptonewsbot
543 followers · 28438 posts · Server schleuss.online
igorlogius · @igorlogius
3 followers · 49 posts · Server mstdn.social
igorlogius · @igorlogius
3 followers · 49 posts · Server mstdn.social
igorlogius · @igorlogius
3 followers · 53 posts · Server mstdn.social
Perry · @perry_mitchell
2 followers · 14 posts · Server infosec.exchange

Honestly struggling with 's Manifest V3 limitations regarding its background script. Can't get any long-lived processes working, and managing hydration of states during suspension and wake up is troublesome as don't fire events for this.

I'm honestly afraid that I'll just have to fall back and get the browser extension to rely on the desktop app.. And this really defeats all the strides @buttercup has made with its browser extension being its own application. Don't want to do it but I'm seeing no other *reliable* way.

Anyone else out there building hitting this road block? Would really appreciate any words of encouragement or suggestions as to what to do here..

#chrome #serviceworkers #browserextensions #browserextension #browseraddon #browserAddons #firefox #manifestv3

Last updated 2 years ago

Perry · @perry_mitchell
2 followers · 8 posts · Server infosec.exchange

Already sick of ’s manifest V3 for extensions. The requirement to have service workers instead of background daemons means I can’t keep my password manager’s data in memory.

What am I supposed to do, decrypt the user’s vault every time the service worker wakes?

Anyone have any better ideas? I’d prefer to not have to rely on the desktop app for the “live” vault data, as having a stand alone extension is valuable as a feature in itself.

#chrome #googlechrome #manifestv3 #serviceworkers #serviceworker #browserextensions #browserAddons

Last updated 2 years ago

Perry · @perry_mitchell
1 followers · 3 posts · Server infosec.exchange

Did you know that `BroadcastChannel` exists? I didn’t until recently 🤦‍♂️

developer.mozilla.org/en-US/do

Modern browser feature to allow message sending between same-origin tabs. Works great for websites and extensions alike. I’m mind-blown.. this totally snuck up on me.

Am now using it in the @buttercup browser extension for inter-tab/popup/background communication as the extension has its own origin. Funny that this seems way more efficient and simple when compared to the native alternatives for extensions (runtime.addListener, sendMessage etc.).

#javascript #browsers #browserextensions #browserAddons #chrome #firefox #edge

Last updated 2 years ago

igorlogius · @igorlogius
3 followers · 53 posts · Server mstdn.social
Ash Ryan Arnwine · @ashryan
49 followers · 57 posts · Server indieweb.social

🧭 Building Safari Web Extensions is not a topic I thought I'd get into at all this year, but sometimes you get an itch to try some new APIs.

@kerrishotts and I go into depth on how to get started building a browser extension for Safari. From there, we go into the inner workings of writing extensions in JavaScript.

idratherbescripting.com/episod

#javascript #browserextensions #apis

Last updated 2 years ago

Mott · @mgiven
95 followers · 278 posts · Server mastodon.radio
igorlogius · @igorlogius
3 followers · 53 posts · Server mstdn.social
Kevin C. Tofel · @kevinctofel
1450 followers · 1055 posts · Server hachyderm.io

Here's what's going on in the world of extensions

“The past year introduced some exciting new changes to the extensions world. The majority of these changes are foundational and take place in the deeply technical back-end of the system, typically out of sight of most users.”

blog.mozilla.org/en/products/f

#firefox #mozilla #browser #browserextensions

Last updated 2 years ago