this post was submitted on 09 Sep 2023
22 points (95.8% liked)

Linux and Tech News

1017 readers
29 users here now

This is where all the News about Linux and Linux adjacent things goes. We'll use some of the articles here for the show! You can watch or listen at:

You can also get involved at our forum here on Lemmy:

Or just get the most recent episode of the show here:

founded 1 year ago
MODERATORS
[email protected]
22
Chrome extensions can steal plaintext passwords from websites (www.bleepingcomputer.com)
submitted 1 year ago by [email protected] to c/[email protected]
5 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago

the analysis showed that 190 extensions (some with over 100k downloads) directly access password fields and store values in a variable, suggesting that some publishers may already be trying to exploit the security gap.

That's the scary bit. This field has been accessible for quite some time...