![]() ![]() For local storage: It supports to export the image as a. What’s more, the program provides several output modes. Besides multiple screen snipping features, this powerful extension allows users to record the screen and webcam image as well. ![]() ![]() If you are looking for a mode detailed information and the complete story, read it here. Awesome Screenshot is a high-rated screen capture extension in Chrome. I think that’s enough information for you to review your extension and decide for yourself what do. I see little difference between a client-side attack and this ‘service’, except that it can be argued that the end user willingly (but maybe unwittingly) entered into the agreement. The potentially sensitive URLs are sent over plaintext HTTP in easily base64-decryptable form, and through the use of some ‘niki-bot’ crawler (which is apparently so malicious its User-Agent requires obfuscation with no reference to SimilarWeb, Awesome Screenshot, or any other explanation for its use – nor does it bother to respect robots.txt), seems to intend to make further reconnaissance against these URLs at a later date. The tracking and transmission of your browsing history is happening automatically, silently, with no proper explanation in the extension’s details on the Chrome App Store. It wasn’t long before negative reviews on the Chrome app store led me to these two articles, which both seemed to confirm that the extension contains javascript which sends browsing activity in plaintext to an upstream service lb., which redirects or makes use of an API belonging to, which some say is part of a third service called SimilarWeb. Unless someone tracks your browsing activity from the browser, and stores it somewhere etc.īolstered by this corroborating story, I decided to look further into this AwesomeScreenshot extension. Somehow, niki-bot seems to know about these URLs. It offers efficient compatibility with third party applications such as trello where you can upload your screenshots. With Awesome screenshot extension, you can also record screencasts. He started seeing this new bot trying to access some pages that a regular crawler may not get access to, pages that require authentication to access, or to know even know that they exist. Awesome screenshot screen capture extension is not only useful for a chrome full page screenshot but also for annotating and editing the captures. , and when finishes it open a new tab with some buttons. I am no security expert, so I will borrow words of Miguel Jacq, a Linux administrator who has an interesting story to tell, about this extension and a related bot, “niki-bot”. Awesome Screenshot - Capture & Annotate - It says capturing. ![]()
0 Comments
Leave a Reply. |