Live data from Hacker News

The "Window Resizer" extension for Chrome now contains malware (2013)

productforums.google.com

1–10 of 124 posts

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#3
Since Chrome auto-updates extensions, users are likely not aware of this change.

I've been using the extension for several months until I noticed the transparent redirection. In fact, the only reason I noticed the redirect is when it failed. I clicked on a Google search result and got stuck on a blank page like this:

    http://ecolink3.ecosia.org/?key=3cdcd4dc082e3c7b860abe4608b6925d&out=http%3A%2F%2Fwww.usatoday.com%2Fstory%2Fpopcandy%2F2013%2F01%2F15%2Ffred-armisen-ira-glass-this-american-life%2F1836079%2F&cuid=2

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#4
post #2

The linked discussion is back from mid-December and the extension has been removed from the Chrome Web Store: https://chrome.google.com/webstore/detail/window-resizer/kke...

This is true, but existing Chrome users aren't notified when an extension is removed from the store. I had no idea of this malware until it surfaced when the redirect failed.

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#5
post #2

The linked discussion is back from mid-December and the extension has been removed from the Chrome Web Store: https://chrome.google.com/webstore/detail/window-resizer/kke...

Smooth Gestures (lfkgmnnajiljnolcgolmmgnecgldgeld) has done the same thing for well over a year now. I (and many others) reported the addon to Google, but it still remains.

What does it take to get something like this removed?

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#6
What is more interesting is the reaction from the developer himself. He seems to be completely unimpressed by the criticism. Noting that one permits Chrome extensions to do stuff, and they would have seen this permission the extension required when they updated or installed it.

Furthermore, he is quoted as joking about how he could have sold the extension to someone to get your passwords and whatnot (but ensures us that he hasn't done so).

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#7

Since Chrome auto-updates extensions, users are likely not aware of this change. I've been using the extension for several months until I noticed the transparent redirection. In fact, the only reason I noticed the redirect is when it failed. I clicked on a Google search result and got stuck on a blank page like this: http://ecolink3.ecosia.org/?key=3cdcd4dc082e3c7b860abe4608b6925d&out=http%3A%2F%2Fwww.usatoday.com%2F…

It's kind of creepy how close that domain name is to my own domain (and username here). Definitely elicited a double take when I saw it.

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#8
post #6

What is more interesting is the reaction from the developer himself. He seems to be completely unimpressed by the criticism. Noting that one permits Chrome extensions to do stuff, and they would have seen this permission the extension required when they updated or installed it. Furthermore, he is quoted as joking about how he could have sold the extension to someone to get your passwords and whatnot (but ensures us t…

That is interesting.

It could be criticism of the existing system. Or he could have other goals/intentions.

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#9
post #8
post #6

What is more interesting is the reaction from the developer himself. He seems to be completely unimpressed by the criticism. Noting that one permits Chrome extensions to do stuff, and they would have seen this permission the extension required when they updated or installed it. Furthermore, he is quoted as joking about how he could have sold the extension to someone to get your passwords and whatnot (but ensures us t…

That is interesting. It could be criticism of the existing system. Or he could have other goals/intentions.

He asks specifically if he has broken some rules in Google Chrome's terms of service, where another user replies with quotations from the ToS. He barks at that saying his extension is allowed to do what he does, because his extension does reveal exactly what it does, if you read its permissions carefully.

Although, I cannot confirm whether that is true, but that's what he is saying.

I have no idea what he is up to; but aren't extensions supposed to be reviewed if they in the extension catalogue?

Re: The "Window Resizer" extension for Chrome now contains malware (2013)

#10
Reddit discussion from last month:

http://www.reddit.com/r/YouShouldKnow/comments/1snyyl/ysk_th...

Also, alternative as discussed on SO:

http://stackoverflow.com/questions/20775775/alternative-to-c...

See it in action:

http://chrisbalt.com/blog/2013/12/20/link-hijacking-through-...

Edit: Related:

http://superuser.com/questions/694825/why-my-google-search-r...

http://windowresizer.userecho.com/topic/353032-did-you-pull-...

Post reply on HN