@andreasbovens Yeah, I guess there’s room for user agents to innovate. Maybe forget permissions after a period of not using an extension or so. Or some system that detects when all of a sudden review anomalies happen and then proactively revokes permiss@oliverdunk_
Wow, what a brilliant write-up by Matt Frisbie on creating a Chrome extension that steals everything: https://t.co/WEp59OD1Rw. 🥷 Having these attack vectors documented in the open is crucial. Prune your extensions regularly!