Browser vendors act as the gatekeepers to the world’s data. As such, their actions or inactions can impact billions of users around the globe. As stewards of the web, browser vendors have the ability to review, audit, approve, and disapprove browser extensions. We uncovered eight extensions involved in the DataSpii’s unprecedented data collection, two of …
Category Archives: DataSpii
DataSpii Report
DataSpii: The catastrophic data leak via browser extensions Sam JadaliSecurityWithSam.com Abstract We present DataSpii (pronounced data-spy), the catastrophic data leak that occurs when any one of eight browser extensions collects browsing activity data — including personally identifiable information (PII) and corporate information (CI) — from unwitting Chrome and Firefox users. Our investigation uncovered an online …