• Kissaki
    link
    fedilink
    English
    arrow-up
    2
    ·
    9 days ago

    54 extensions steal Google account identity via OAuth2

    It’s embarrassing the Chrome extension store/infrastructure does not catch these

  • Kissaki
    link
    fedilink
    English
    arrow-up
    1
    ·
    9 days ago

    I wonder what upsides those “web client” extensions bring for platforms you could just open “clients” as websites for (telegram, tiktok listed). Not need to install an extension.