S6, E245 - Hard-coded Secrets and Unencrypted Data: A Digital Security Nightmare
Send us Fan Mail
Several popular Chrome extensions, including privacy and security tools, have been found leaking sensitive data through unencrypted HTTP and hard-coded credentials in their code. Security is both hard and easy - hard because of existing unencrypted protocols and trust placed in developers, but easy because fundamental security practices should be common knowledge in 2025.
• Chrome extensions including DualSafe Password Manager and Avast Online Security are leaking sensitive user data
• HTTP vs HTTPS - the 'S' stands for security and encrypts data transmission over the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.