Hacker News Reader

I don't understand how to know and check if chrome extensions intercept this kind of data to or from... (and send a copy back to X or Y )

A similar thing is in the 'awesome screenshot' extension (I think) - but I fear data can be exfiltrated - and if not now, when it is sold or taken over or changed in the future.

So I don't use extensions this way - but maybe I should know how to check and enjoy the benefits - I just don't know.

View on HN

There is nothing fishy going on. You can see the source it is small and simple. And because it is not on store, what you see is what you get when you load it. Background.js file is the one that sends chat completion request to openai.

EDIT: There is https://github.com/dnakov/little-rat to tell you which URLs your installed extensions are hitting.

The current state of the code isn’t obfuscated in any way that I can see. You can easily pop through the JS and see exactly what it’s doing. The extension itself is pretty simple to follow.

Reply on news.ycombinator.com