Browser Extensions I Can't Live Without

Post by Markoff » Tue, Aug 11, 2020, 3:46 PM UTC

juusto wrote: post #22

NoScript, uBlock Origin and Dark Reader. All other ones are nice to haves but those are my building blocks.

Post by nine_k » Tue, Aug 11, 2020, 3:47 PM UTC

Chirael wrote: post #21

jahlove wrote: post #17

I am too wary of malware extensions to install that many. It is clearly trivial [0] for malware to get into the Chrome store, and Google is not doing enough to make me feel comfortable with it. Additionally, I know that even as non-malware extensions grow in popularity they are solicited by malware companies to integrate their software in an update. I experienced this first hand with the HoverZoom extension. [1] [0]…

Yes, this - absolutely. Every extension you install is another potential risk/attack vector. Consider the sources carefully and run the least number of extensions possible. Each one potentially has control of your browser, so choose accordingly.

Post by hackinthebochs » Tue, Aug 11, 2020, 3:50 PM UTC

ahmedfromtunis wrote: post #28

jahlove wrote: post #17

I am too wary of malware extensions to install that many. It is clearly trivial [0] for malware to get into the Chrome store, and Google is not doing enough to make me feel comfortable with it. Additionally, I know that even as non-malware extensions grow in popularity they are solicited by malware companies to integrate their software in an update. I experienced this first hand with the HoverZoom extension. [1] [0]…

Isn't this true, to some degree, with all software distribution channels? Weren't CCleaner and FileZilla hacked to distribute malware alongside the main payload?

Post by Markoff » Tue, Aug 11, 2020, 3:51 PM UTC

5986043handy wrote: post #3

Would add HTTPS Everywhere https://www.eff.org/https-everywhere and NoScript https://noscript.net/ to that list

Post by squidofbits » Tue, Aug 11, 2020, 3:52 PM UTC

nine_k wrote: post #33

Chirael wrote: post #21

Earlier quoted context omitted.

Yes, this - absolutely. Every extension you install is another potential risk/attack vector. Consider the sources carefully and run the least number of extensions possible. Each one potentially has control of your browser, so choose accordingly.

Lately I ended up running much fewer extensions than I used to, and actually looking at their source first. I think the only closed-source extension I run is lastpass, and I'm evaluating open-source alternatives. How do people who cannot read code even cope, I don't know.