Some highlights:
- 50% of the 188,640 extensions have less than 16 users/installs
- 13 extensions have over 10m users/installs
90 karma · joined March 26, 2014
- 50% of the 188,640 extensions have less than 16 users/installs
- 13 extensions have over 10m users/installs
I heard about the pricing section being an issue for some but haven't been able to reproduce it. I'm going to setup BrowserStack to find all of the issues.
- Will (not Matt)
Scoring is a complex problem and there's some literature on the subject. We can break down scoring / threat intelligence into a few buckets:
- Known bad actors: some extensions are known bad actors. They've exposed data and even made the news for it. Let's make sure those are absolutely not running in your environment.
- Heuristic classification: a number of heuristics can be used to score the threat of an extension, for example, the permissions it requests, its content security policy, etc...
- Automated code review: even if an extension developer is not themselves intentionally malicious, the extension may be using outdated or vulnerable libraries that can be exploited by others.
- Manual review: there are over 200k extensions so an extensive manual review of each is not practical. Still, for the most popular extensions, a manual review can effectively score the extension based on factors that are difficult to automate. For example, review of the privacy policy, investigation of the owner entity and its business practices, etc...
- Corroboration / triangulation: a category of threat detection that Extension Monitor will be able to provide at scale is that of cross-referencing installations with purchased data to single out likely sources.
These may also apply to a single extension across versions / time.
Regarding counter-measures, Extension Monitor is read-only at this time, so remedying the threat is environment specific. Some fleet management solutions may provide this. Other self-managed machines would require the machines administrator to remove the extension. Some teams that already allowlist or blocklist extensions would find the threat scores useful in their own manual investigations of which extensions to allow or block.
Hope this helps,
Will (still a real human... and not a Matt)
I can also assure you I'm not going to switch gender in the foreseeable future. I'm quite comfortable as a cisgender man.
Regarding the instant popup, unfortunately I'm not able to keep it hidden with Drift, but wanted to make sure visitors know they can easily reach me.
Kleiner Perkins, the VC firm behind many of the biggest startups in Silicon Valley, is looking for an Engineer in Residence to help build internal web apps and data pipelines. The role is a one or two year commitment best suited for Senior Software Engineers who plan to go on to build their own company or for those looking to join one of our fast-growing portfolio companies.
More details: http://bit.ly/2EuTkDS
Kleiner Perkins, the VC firm behind many of the biggest startups in Silicon Valley, is looking for an Engineer in Residence to help build internal web apps and data pipelines. The role is a one or two year commitment best suited for Senior Software Engineers who plan to go on to build their own company or for those looking to join one of our fast-growing portfolio companies.
More details: http://bit.ly/2EuTkDS
Come join us in building out Indiegogo's platform to help entrepreneurs bring their idea from concept to market. We're all full-stack engineers and build mainly on Rails and Angular with a dusting of React.
Indiegogo is the type of place that empowers you to take an idea and run with it.
We're hiring for:
- Software Engineer - http://bit.ly/1TloEcm
- Devops Engineer - http://bit.ly/1SG4CWG
- Product Designer - http://bit.ly/1M6Zagq
I'm a Software Engineer here and can answer any questions. Feel free to reach out directly: w+hn@indiegogo.com (engineers only - don't abuse it)
Come join us in building out Indiegogo's platform to help entrepreneurs bring their idea from concept to market. We're all full-stack engineers and build mainly on Rails and Angular with a dusting of React.
Indiegogo is the type of place that empowers you to take an idea and run with it.
We're hiring for:
- Software Engineer - http://bit.ly/1TloEcm
I'm a Software Engineer here and can answer any questions. Feel free to reach out directly: w+hn@indiegogo.com (engineers only - don't abuse it)
Come join us in building out Indiegogo's platform to democratize the way ideas get funded. We're all full-stack engineers and build mainly on Rails, Angular, iOS, and Android.
Indiegogo is the type of place that empowers you to take an idea and run with it.
We're hiring for:
- Senior Software Engineer - http://bit.ly/1EKqgpt
- Lead DevOps Engineer - http://bit.ly/1EKqooW
- iOS Developer - http://bit.ly/1QivGcU
I'm a Software Engineer here and can answer any questions. Feel free to reach out directly: w+hn@indiegogo.com (only engineers - don't abuse it)
Happy New Year!
Come join us in building out Indiegogo's platform to democratize the way ideas get funded. We're all full-stack engineers and build mainly on Rails, Angular, iOS, and Android.
Indiegogo is the type of place that empowers you to take an idea and run with it.
We're hiring for:
- Senior Software Engineer - http://bit.ly/1EKqgpt
- Lead DevOps Engineer - http://bit.ly/1EKqooW
- iOS Developer - http://bit.ly/1QivGcU
I'm a Software Engineer here and can answer any questions. Feel free to reach out directly: w+hn@indiegogo.com
Indiegogo is the type of place that empowers you to take an idea and run with it.
We're hiring for:
Senior Software Engineer - http://bit.ly/1EKqgpt
Lead DevOps Engineer - http://bit.ly/1EKqooW
iOS Developer - http://bit.ly/1QivGcU
I'm a Software Engineer here and can answer any questions. Feel free to reach out directly: w+hn@indiegogo.com
Come join us in building out Indiegogo's platform to democratize the way ideas get funded. We're all full-stack engineers and build mainly on Rails, Angular, iOS, and Android.
Indiegogo is the type of place that empowers you to take an idea and run with it.
We're hiring for:
Senior Software Engineer - http://bit.ly/1EKqgpt
Lead DevOps Engineer - http://bit.ly/1EKqooW
iOS Developer - http://bit.ly/1QivGcU
I'm a Software Engineer here and can answer any questions. Feel free to reach out directly: w+hn@indiegogo.com
Come join us in building out Indiegogo's platform to democratize the way ideas get funded. We're all full-stack engineers and build mainly on Rails, Angular, iOS, and Android.
Indiegogo is the type of place that empowers you to take an idea and run with it.
We're hiring for:
Senior Software Engineer - http://bit.ly/1Q6rIns
Lead DevOps Engineer - http://bit.ly/1Jvx7jy
iOS Developer - http://bit.ly/1NVnsbe