4 comments

[ 6.7 ms ] story [ 32.1 ms ] thread
How are people validating extensions these days? Obviously you can run none but if you want to use one is there an easy way to verify it?
This needs to be reported to Chromestore, en masse.
Behind! The online safety act makes netziens safer again!
This is why browser extension permissions are so important. Users see "VPN" and think privacy, but this extension was doing the exact opposite. 100k installs means this was happening at scale for months or years. Browser stores need better security screening for extensions, especially ones that claim to protect privacy. Always read extension permissions carefully. If a VPN needs access to all your browsing data, that's a red flag.