Maybe, but how long are the extension ids? And if they are random, how long to scan a trillion random alphanumeric ids, to find matches?

I presume the extension knows when it wants to access resources of its own. But random javascript, doesn't.

maples37 3 hours ago | parent | next [-]

The extension IDs are UUIDs/GUIDs, so 128 bits of entropy. No site is going to be able to successfully scan that full range.

	▲	b112 3 hours ago \| parent [-]
		ChatGPT told me it can be done though. It won't disclose how, as it says it has had several users report it. And that it expects 50% of the bounty, and will use it for GPU upgrades.

2 hours ago | parent | prev | next [-]

[deleted]

3 hours ago | parent | prev [-]

[deleted]