Andrew Beyer
@beyer.dev
Founder of Kindness.ai
In a past life, I managed passwords, created websites, and refereed airborne duels between missiles traveling at Mach 3.
In a past life, I managed passwords, created websites, and refereed airborne duels between missiles traveling at Mach 3.
Hi!
I haven't been using browser extensions much lately, although we recently built one for fun debugging. I found this exploit very interesting. It's something I always knew was possible, but not smart enough to highlight so significantly: labs.sqrx.com/polymorphic-...
I haven't been using browser extensions much lately, although we recently built one for fun debugging. I found this exploit very interesting. It's something I always knew was possible, but not smart enough to highlight so significantly: labs.sqrx.com/polymorphic-...
Polymorphic Extensions: The Sneaky Extension That Can Impersonate Any Browser Extension
Imagine that your AI transcriber tool shapeshifts into your password manager, then your crypto wallet and finally into your banking app —…
labs.sqrx.com
March 21, 2025 at 5:48 PM
Hi!
I haven't been using browser extensions much lately, although we recently built one for fun debugging. I found this exploit very interesting. It's something I always knew was possible, but not smart enough to highlight so significantly: labs.sqrx.com/polymorphic-...
I haven't been using browser extensions much lately, although we recently built one for fun debugging. I found this exploit very interesting. It's something I always knew was possible, but not smart enough to highlight so significantly: labs.sqrx.com/polymorphic-...
Lol, when I first read this, I thought, "Holy crap, access to extension APIs as a website? What are they smoking over there?" Then I felt sad realizing Chrome _still_ doesn't use the browser namespace. But hey, better late than never?
March 21, 2025 at 5:37 PM
Lol, when I first read this, I thought, "Holy crap, access to extension APIs as a website? What are they smoking over there?" Then I felt sad realizing Chrome _still_ doesn't use the browser namespace. But hey, better late than never?
I gotta make it to one of these!
December 4, 2024 at 7:07 AM
I gotta make it to one of these!