Top all-time · #14629
Sam Jadali
Personal blog · securitywithsam.comsecurity
Sam Jadali writes Security with Sam, a personal blog at securitywithsam.com about security. Since 2019, 5 different Hacker News readers have linked it 5 times, most often “DataSpii: Data leak via browser extensions”. The last post was in 2019, but the archive is still widely read.
Too few sampled comments (4) to say how often HN recommends it.?
Why HN links it
HN readers link Sam Jadali's posts on the DataSpii leak and on browser extensions that collect users' browsing data. They cover how such extensions hide their data grabs and how they are discovered.
Summarised by Claude from a sample of 4 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
A technical professional and cybersecurity expert, Sam shares his research with users world wide! Dataspii is a global data leak, discovered by Sam.
Most-linked posts?
- DataSpii: Data leak via browser extensions5 people · 5 mentions · first linked 2019-07-18
What Hacker News says?
It's not different. The current state of the browser extension ecosystem can cause and has caused massive data privacy violations; browser vendors are locking down previously open APIs to try and remediate that, breaking some functionality that developers want. Context: https://securitywithsam.com/2019/07/dataspii-leak-via-browse... https://www.zdnet.com/article/apple-neutered-ad-blockers-in-...
Comment linking /2019/07/dataspii-leak-via-browser-extensions/
on “Facebook and Speech”Submitted DataSpii: Data leak via browser extensions as a story · 39 points
HN discussion> The Hover Zoom extension can be seen downloading the 156KB payload I have tried to find out from the article or the original report[1] how the extensions could execute the payload from remote servers. I could find no details about this -- I consider this one of the key point. I could download and unzip one of the extension hosted on the owner's server, "SaveFrom.net Helper". As expected, the manifest.json containe…
Comment linking /2019/07/dataspii-leak-via-browser-extensions/
on “More on DataSpii: How extensions hide their grabs and how they’re discovered”> There are extensions that let you implement custom CSS("userstyle"), why not use those instead? If an extension goes rogue, everything you do in your browser is compromised https://www.grahamcluley.com/rogue-browser-extension/ "Stylish" browser extension steals all your internet history https://robertheaton.com/2018/07/02/stylish-browser-extensio... My browser, the spy: How extensions slurped up browsing histories…
Comment linking /2019/07/dataspii-leak-via-browser-extensions/
on “Show HN: Dark Mode for HN”The full report, I think: https://securitywithsam.com/2019/07/dataspii-leak-via-browse...
Comment linking /2019/07/dataspii-leak-via-browser-extensions/
on “4M people have Web browser extensions that sell their every click”