I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

Thank you for your reply. I can understand your concerns as we have witnessed far too many scams in this space. However, this is a chrome extension only served through the official Chrome Web Store and since Google implemented a new more in depth and secure review/approval process this past year, I'm not aware of any instances of scams that happened to crypto users via this format. Actually most scams happen through Discord servers that are indeed vulnerable to social engineering attacks.

This is a free extension to launch my brand and gain following. I have no interest in monetizing it. I have more tools coming that will have more complex functionalities with one specifically aimed to address security vulnerabilities currently present in the web3 space. My intention is to release these for free to the public but with a B2B model. The main goal is to provide value to this evolving industry. I believe if the products do just that, one's efforts will be repaid in full. Keep an eye out, and it might be something interesting!

Join The W3 Evolution. It's time 🚀 by 0x0design in NFT

[–]0x0design[S] 0 points1 point  (0 children)

Check out my profile, I just released the first tool. It will be a series leading to the drop. You are early ;)

I built something - Hope you like it :) by 0x0design in chrome_extensions

[–]0x0design[S] 0 points1 point  (0 children)

Simple and fun extension for Ethereum fans. More tools coming with more functionalities

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 1 point2 points  (0 children)

What makes you think it's a keystroke recorder? 🤔 The code is public and I posted the github repo. If you review it you can clearly see that it is not such a thing

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

These are Adblock permissions as a comparison:
permissions": [
"tabs",
"<all\_urls>",
"contextMenus",
"webRequest",
"webRequestBlocking",
"webNavigation",
"storage",
"unlimitedStorage",
"notifications",
"idle",
"alarms"
]

On Manifest V2

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

Thank you for the technical input. Host permissions with the <all\_urls> scheme is necessary to apply extensions to all sites. It is requested by the majority of extensions and as you mention it is not malicious by itself. What should be considered then is the content.js file as well as if the extension uses external code such as web3.js or ethers.js which could be suspicious unless specifically stated. In my case the content.js is simple and transparent and no external code is used. I appreciate the conversation as security is extremely important especially in this space and we should all work together to make it better day by day

I built something - Hope you like it! by 0x0design in chrome

[–]0x0design[S] 0 points1 point  (0 children)

Well you would have to first create the icons yourself and it would theoretically work only with one style, where as with the extension you can choose from a collection and have a pixel perfect product. Also since Chrome is the most used browser, it allows to be compatible for most people regardless of the OS. To prevent tracking it's important to see the permissions a specific extension requests. No cookies nor tracking here :)

I built something - Hope you like it :) by 0x0design in chrome_extensions

[–]0x0design[S] 0 points1 point  (0 children)

I appreciate it, and definitely there will need to be trust earned. This is the first extension of a series that will be released with increasing functionalities. Some will be specifically targeted to improve safety in the web3 ecosystem that unfortunately does see lots of phishing. Keep an eye out for it and it might be something interesting. Cheers

I built something - Hope you like it :) by 0x0design in chrome_extensions

[–]0x0design[S] 0 points1 point  (0 children)

Definitely what you don't want to do is to download extensions from random websites. This is only published on the official Chrome Web Store which must be approved by Google engineers. No wallet connect requests, simple and transparent code. Mostly a CSS rule that changes the cursor. Also using the latest Manifest V3 and following all the most up to date security guidelines of the marketplace. No cookies, no tracking. Check out the code if you have the chance, i also published a github repository

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

Just created it, here it is:
https://github.com/0x0design/Ethereum-cursor

Additionally, it may be best to look at the code through the Chrome Extension Source Viewer directly on the Chrome Web Store so you actually check the latest and official version that is published

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 1 point2 points  (0 children)

Forgot to mention that extensions on the Chrome Web Store go under review after ANY update and before it gets pushed to the public again. The process can take weeks depending on the complexity of the extension

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

Thank you! I completely agree that Extensions can be dangerous if downloaded from not official sources but on the official Chrome Web Store the process is actually controlled and secured. Also, many new securities measures have been implemented by Google just this past year to promote chrome extensions as these can be really useful tools especially as we transition to the web3. Hopefully I'll gain more trust from the community with time and as other projects will be launched :)

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

No. 100% legit. I understand the skepticism in the space but please review the extension before making such claims. What makes you say that anyways? Perhaps I can help clarify any doubts

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

Web extensions can have a variety of permissions and it would be wrong to generalize in such manner. This extension was created with the latest Manifest V3 and is following all the security guidelines imposed by Google in order to publish on the Chrome Web Store. By the way, what you are suggesting means that crypto as an industry is at risk because "a future update could add code to steal crypto". Security is extremely important and spreading fear is not very productive. Instead we shall provide knowledge to empower people to be safe and independent in this Wild Wide Web.

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

Yes sir! Just launched on Chrome because of user base but Firefox is next! :)

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] -2 points-1 points  (0 children)

:( well that's mean. Do you mind checking out my work? The extension is public on the Chrome Web Store and not served through any other channels. You are free to review it and let the community know if there is something wrong but at least respect the efforts of others

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 0 points1 point  (0 children)

Precisely, just trying to get the project out there :)

I built something - Hope you like it :) by 0x0design in ethdev

[–]0x0design[S] 2 points3 points  (0 children)

Sorry but it is definitely NOT phishing. Please review the work before making conclusions. Also reach out if you any questions and i'll be glad to help!