Author

Topic: Chrome extension update seems fishy? (Read 910 times)

member
Activity: 84
Merit: 10
Weighted companion cube
March 03, 2013, 05:46:10 AM
#6
I looked at the code and there isn't anything fishy there.
legendary
Activity: 1498
Merit: 1000
March 02, 2013, 09:01:21 PM
#5
Ok I think the permissions I have nothing to do with your actual mt gox account. It probably needs permission cause it is getting the websocket connection from mt gox. Also it is doing cross domain requesting. For the forex thing it looks like it gets the USD price, and then using the Forex price, converts it to different currencies which isn't correct. It should get the correct currency for the bitcoins, otherwise it will be giving a false price since the euro market is small. As of now it looks safe.
hero member
Activity: 728
Merit: 500
vip
Activity: 1358
Merit: 1000
AKA: gigavps
March 02, 2013, 08:11:24 PM
#3
I would save the crx file and rename that from crx to zip, then look at the source code, and see why it needs it. Does look a little fishy thou

I'm in the bitcoin minority. I don't know anything about code.

Post a link to the extension and I'll take a look.
hero member
Activity: 728
Merit: 500
March 02, 2013, 08:10:34 PM
#2
I would save the crx file and rename that from crx to zip, then look at the source code, and see why it needs it. Does look a little fishy thou

I'm in the bitcoin minority. I don't know anything about code.
hero member
Activity: 728
Merit: 500
March 02, 2013, 08:01:48 PM
#1
I've used the chrome extension "Mt Gox Peek" for a few months now and it works great. All it does is show the current price of bitcoins in the top of the browser. However, today it's asking for permission to update the terms. The exact quote is:

 "The newest version of Mt. Gox Peek has been disabled because it requires more permissions. It can now - Access your data on mtgox.com and www.forex.com".

That seems bad to me. It's just supposed to display the price, why would it need to access my mtgox data? And what the hell does forex have to do with anything?
Jump to: