Mind you, this still isn't a good excuse to use a Chromium-based browser.
And for all you people using Brave out there, well :corgi_wtf1: 🖕 Brave is run by this guy who hates queer people and believes conspiracy theories about Covid, so maybe don't use his shitty browser that's been caught injecting affiliate links.
Me: Please don't use Chromium-based browsers, use Firefox instead. Google has way too much control over the web because of Chromium and they'll be sure to leverage that in order to benefit themselves.
Chromium: Hey all, we're getting rid of ad-blockers because it's cutting into our record-breaking revenue! I mean, uh, we're deprecating Manifest V2 for, uh, security. Yeah.
Me: See? Please use Firefox. :blobfoxmeltsob:
Mozilla: Hey friends, AI is really cool! *steps on rake* Hey friends, we're making an ads business! *steps on rake* Hey friends, we have a ToS with either the most nefarious or the most incompetent language ever! *steps on rake* Also AI is cool!!!
Me: ... :corgi_wtf1: I hate it here.
Malicious parties have taken over popular Chrome plugins to push malware.
I can confirm it is not just Cyberhaven plugin. We dont have a list of impacted plugins, just reports of machines reaching out to the reported malicious domains. Still gathering informaiton.
https://therecord.media/hackers-target-vpn-ai-extensions-google-chrome-malicious-updates
Ugh, the #chrome #extension ecosystem is exactly as bad as I'd expect.
And the fact extension is still up claiming not to collect any data even if it has been called out in one of the biggest security newsletters shows how much Google care about this (not much). The only thing they care about is pretending to ship AI features to detect malicious extensions. Because that's how you get promoted.
I mean is it even possible to report a suspicious or bad extension? I don't see anywhere
Great research by @WPalant and @c0m4r
And @campuscodi for putting the spotlight on it.
