https://docs.google.com/spreadsheets/d/e/2PACX-1vT1XgBs25gRlg5e3nYCAff967WMtZZTO-TB3rR9zszaJpTpCVFg8j7FkBxnHb3tw3aHGjKBGSxYyLgV/pubhtml

This is why I cringe when people recommend random ass addons to do random shit. Better to just literally stick to ublock origin and maybe 1 other. I really don't trust most extensions.

This is fucked up. Dark Reader?

Who in the hell would use a volume booster extension? Just turn your volume up? Wut.

You can check if you have an affected extension installed by going to the mellowtel settings page, where you can configure mellowtel if its installed (or get a message that you don't run mellowtel): https://www.mellow.tel/user-control

The list;

https://docs.google.com/spreadsheets/d/e/2PACX-1vT1XgBs25gRlg5e3nYCAff967WMtZZTO-TB3rR9zszaJpTpCVFg8j7FkBxnHb3tw3aHGjKBGSxYyLgV/pubhtml

Damn now how am I gonna live without "Change my cursor to Sims 4"?

It's disheartening seeing screen readers on this list. That seems predatory.

Definitely read the original SecureAnnex article as well. The behavior of this software and the people behind it are damning.

I used Youtube unhook in the past but before the AI craze so I'm probably good.

I know a lot of people use Dark Reader so that's gotta hurt.

Other than that I think I'm safe.

a lot of these seem to be accessibility extensions.

how nice, preying on the disabled

The common thread among all of them: They incorporate MellowTel-js, an open source JavaScript library that allows developers to monetize their extensions.

Here is the list of affected extensions.

This is why im extremely careful using browser extensions. The access they have is pretty wide as far as software goes these days. So many people install malicious ones without thinking.

Dark Reader for edge is on here but the Firefox one isn't listed so I'm good there i guess? Super sad i had to uninstall my cat fact extensions. It was nice to have instant access to cat facts in the menu bar.

You can check if you have an affected extension installed by going to the mellowtel settings page, where you can configure mellowtel if its installed (or get a message that you don't run mellowtel): https://www.mellow.tel/user-control

Link to the list is the last word on the page...

Here: https://docs.google.com/spreadsheets/d/e/2PACX-1vT1XgBs25gRlg5e3nYCAff967WMtZZTO-TB3rR9zszaJpTpCVFg8j7FkBxnHb3tw3aHGjKBGSxYyLgV/pubhtml

Yeah the link to affected extensions (245 across 3 platforms)

https://docs.google.com/spreadsheets/d/e/2PACX-1vT1XgBs25gRlg5e3nYCAff967WMtZZTO-TB3rR9zszaJpTpCVFg8j7FkBxnHb3tw3aHGjKBGSxYyLgV/pubhtml

This is confirmed btw. I was just fired from a company who hired a new vp who worked in ad tech. Part of the gig was scraping. But how do they get around Ip blocks and so many guardrails?

Easy. They started a sister business that had an extension they gave away for free, some menial task like taking a screenshot or something to dupe people into getting it

And in the piles of ToS it gave the extension the legal ability to grab random websites, scrape them, and send the data home. Now you have a internet wide scraper platform, and best parts is that you can't be up blocked and even better, you aren't paying for compute.