6 ms·
Good find! I've dug a bit and the extension, at least for now, does not send any metadata associated to your browser[1], only a comma separated list of extensio
by loginatnine 3y ago
Good find! I've dug a bit and the extension, at least for now, does not send any metadata associated to your browser[1], only a comma separated list of extension IDs. Of course the IP could be easily used.
Looking at the result from the API of one extension I had installed[2], it lists metadata associated to the developer. I've tried to use the `chrome.management.get(id)` Chrome API and it does not return this information, and there does not seem to be a way to get the content of the manifest.json programatically. Therefore, to do the job of the extension as it is, it does need an external source.
[1]: https://github.com/classvsoftware/under-new-management/blob/master/src/background.ts#L26-L35 https://github.com/classvsoftware/under-new-management/blob/...
[2]: https://api.extensionboost.com/v1/developer?extension_ids=ghonlpiinhagjnhgiohnnbajakcfohid https://api.extensionboost.com/v1/developer?extension_ids=gh...
- mfrisbie 3y agoI tried very hard to find a way around using an external server, as I knew HN would harp on the related privacy issues. No luck.