Chrome Web Store

Well, we used to have it so you had to go through Mailchimp.

Now you can just search it on the Chrome Web Store.

Just look up X2 Uno.

Admittedly, somebody's probably gonna have to look at the show notes just to know how that's spelled.

I...

Dude, I don't know how these, uh, extensions get into the Chrome Store.

Like, I, well, I, I know how they get in, it just sucks that they do get in so successfully.

So basically this thing, by the way, this, in my opinion, this Chrome browser extension, the whole point of it is to get in, steal your oath token, and then the whole point is to use it to then DM or send whispers to, um, your viewers, right? So, uh, obviously if, if you're a Twitch user or, like, in chat, or you have friends that do Twitch or whatever, DJ B Sec, uh, when he's doing his turntables, uh, you should definitely uninstall this, uh, Twitch browser extension.

Thank you so much for the time.

If anybody's interested in trying it out and learning as a consumer what we do, just go to rewardedinterest.com. You can download us in the Chrome Web Store.

You can get a link to it from there.

And we'd love any feedback, but it's been available for a while and working really well for our customers.

Right

... um, and yeah, we do have a, uh, a product on the App Store, both Android and iOS, and we also, it's available in the Chrome Web Store, Firefox, Microsoft Edge as an extension, and it saves you money.

When you get to checkout, it auto applies discount codes, and it finds different ways and coupons for you to save money, and within moments, uh, automatically.

And you know, it's nice to save a few bucks, especially in today's world, so yeah, thank you for that.

We started experimenting.

You know, we started looking at the Chrome Web Store versus the Play Store.

You know, different stores have different dynamics and different stores have different number of users.

You can just learn lessons from different places.

We could imagine a world, snap our fingers, where marijuana is everywhere, it's a context layer and all.

To make that a reality is then a drug, right? You have to have meetings, you have to get rejected hundreds of times, you have to work, you have to experience failures, right? So the difference between perception, visualization, and what actually reality is, holes in store is there's a very large difference right so i think sometimes people do many projects at a bottom and that's that's a risky thing right because because what happens then is you do many projects and none of them are success right so we've done 30 different individual companies but but none of them has had an acquisition none of them are sold right so we so for us it was really good learning because i was the first time founder myself we learned different spaces different stores all of that so it was a really good learning opportunity probably we could have compressed it right now i know so this person who visited my house right he loves doing a lot of things it just keeps him alive and i think if you have the right structures in place for heart you're good team leaders for each of the projects right then you can actually manage many things right and then you in fact learn from the projects and not only that they can be synergies right i may learn something from the yoga space that hey you know for example mervan is more of a general tool nobody's really searching for a new tab dashboard right but people are searching for yoga so then we can test out a hypothesis is that like new tab dashboard doesn't really interest, but yoga is.

So we can say, hey, if we do an app that's in an area of interest, does that give us an unfair advantage? You know, the Chrome web store has much fewer users than the phone, you know, the app store and the play store.

However, it's also less competitive because of that.

I'll let you all come to your own conclusions on that.

But this is just AdGuard coming forward saying, Dear developer, we regret to inform you that your item has been removed from the Chrome Web Store.

And that is an email or some kind of message that AdGuard formally got.

So this is just kind of the formal nail in the coffin that this is officially dead.

These are internet exposed instances and they're still unpatched.

And so if you run any instances, you need to check out the story to make sure that yours isn't impacted by this.

This is just a very quick heads up that the Chrome Web Store, they found more extensions that were caught stealing cryptocurrency and browser data.

One of these was something called Enable Right Click and Copy Smart Unlock Plus OCR Extension.

It can also display click fix style fake browser updates that trick users into executing malicious commands.

Google has removed the identified extensions from the Chrome Web Store.

Socket advises affected users to change passwords and cryptocurrency holders to move assets to new wallets.

Chinese-linked cyber espionage group Fire Ant has expanded its operations from individual systems to the network infrastructure connecting high-value targets, according to Signia.

So the first one is that there were hundreds of fake Chrome VPN extensions that route traffic through a proxy.

The specific number was 737 browser extensions that were published on the official Chrome Web Store that impersonated well-known VPN and proxy services.

These impersonations impacted things like Proton VPN, NordVPN, Surfshark, ExpressVPN, and even Cloudflare's 1.1.1.1 DNS resolver.

What's fascinating is that Google removed more than 200 of the extensions related to the identified campaign.

Over 500 of them, though, at the time of them writing this, were still available in the Chrome Web Store.

Guys, I, I continue to say this, and I don't know how else I can say this to get people just more aware of these issues.

Extensions are, like, crazy right now.

I mean, the Chrome Web Store, all these big tech companies try to come forward and say, "You know, the only safe way to get software is through our app stores because we vet things so carefully." And then meanwhile, we see stuff like this where even after they find the issue, they still haven't actually removed 500 different things that are straight-up impersonating legitimate projects.