The Members Forum

We hate to scare you on Friday right before a good weekend, but this story is alarming enough that you need to hear about. Before we proceed, now that this exploit is out in the open, be extra careful when you install any Chrome plugin; you may be at risk.

The exploit, developed by programmer Andreas Grech, employs a plugin coded using jQuery to track users’ login information and have it emailed to himself. He claims that he has tested the plugin, and that it has been successful against Twitter, Gmail, and Facebook. In his own words:

The Google Chrome browser allows the installation of third-party extensions that are used to extend the browser to add new features. The extensions are written in JavaScript and HTML and allow manipulation of the DOM, amongst other features.

http://thenextweb.com/google/2010/07/09/hacker-creates-plugin-that-trashes-chromes-security/