Browser extensions turn nearly 1 million browsers into website-scraping bots

Comments

• orionsbelt@midwest.social ⁨1⁩ ⁨week⁩ ago

  The common thread among all of them: They incorporate MellowTel-js, an open source JavaScript library that allows developers to monetize their extensions.

  source
• cmnybo@discuss.tchncs.de ⁨1⁩ ⁨week⁩ ago

  Here is the list of affected extensions.

  source

  • AntiBullyRanger@ani.social ⁨1⁩ ⁨week⁩ ago

    any non fash host CSV?

    source

    • cmnybo@discuss.tchncs.de ⁨1⁩ ⁨week⁩ ago

      Here: files.catbox.moe/pg3cmp.csv

      source
  • Gullible@sh.itjust.works ⁨1⁩ ⁨week⁩ ago

    Take a drink every time you see dog/cat fact browser extensions

    source
• Auth@lemmy.world ⁨1⁩ ⁨week⁩ ago

  This is why im extremely careful using browser extensions. The access they have is pretty wide as far as software goes these days. So many people install malicious ones without thinking.

  source
• WhiteOakBayou@lemmy.world ⁨1⁩ ⁨week⁩ ago

  Dark Reader for edge is on here but the Firefox one isn’t listed so I’m good there i guess? Super sad i had to uninstall my cat fact extensions. It was nice to have instant access to cat facts in the menu bar.

  source
• Wildmimic@piefed.social ⁨4⁩ ⁨days⁩ ago

  You can check if you have an affected extension installed by going to the mellowtel settings page, where you can configure mellowtel if its installed (or get a message that you don't run mellowtel): https://www.mellow.tel/user-control

  source
• starchylemming@lemmy.world ⁨1⁩ ⁨week⁩ ago

  a lot of these seem to be accessibility extensions.

  how nice, preying on the disabled

  source