logoalt Hacker News

toasty228 • today at 4:52 PM • 1 reply • view on HN

They've been doing this for a while, they also scan your browser for thousands of known extensions... It's basically impossible to create a new account unless you send them a pictures of your balls next to a valid passport


Replies

toomuchtodo • today at 4:56 PM

> they also scan your browser for thousands of known extensions

Works in Chrome, doesn't work in Firefox. Firefox randomizes extension IDs per install.

"Chrome extensions can expose internal files to web pages through the web_accessible_resources field in their manifest.json. When an extension is installed and has exposed a resource, a fetch() request to chrome-extension://{id}/{file} will succeed. When the extension is not installed, Chrome blocks the request and the promise rejects.

LinkedIn tests every extension in the list this way."

https://news.ycombinator.com/item?id=47613981

https://news.ycombinator.com/item?id=47967262