<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing.]]></title><description><![CDATA[<p>I've been seeing this extension all over and wasn't sure exactly what folks were doing. Turns out, they weren't doing anything. Claude for Desktop is secretly installing this thing that activates when one of three other extensions are also present.</p><p><a href="https://www.thatprivacyguy.com/blog/anthropic-spyware/" rel="nofollow noopener"><span>https://www.</span><span>thatprivacyguy.com/blog/anthro</span><span>pic-spyware/</span></a></p>]]></description><link>https://forum.fedi.dk/topic/1eeddd4a-efac-4640-be28-b5623ae47c2a/i-ve-been-seeing-this-extension-all-over-and-wasn-t-sure-exactly-what-folks-were-doing.</link><generator>RSS for Node</generator><lastBuildDate>Tue, 28 Apr 2026 00:13:26 GMT</lastBuildDate><atom:link href="https://forum.fedi.dk/topic/1eeddd4a-efac-4640-be28-b5623ae47c2a.rss" rel="self" type="application/rss+xml"/><pubDate>Mon, 20 Apr 2026 13:20:58 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 17:32:54 GMT]]></title><description><![CDATA[<p><span><a href="https://infosec.space/@catbailey" rel="nofollow noopener">@<span>catbailey</span></a></span> Honestly, if you intend to use this with your browser, no OS isolation is going to help you. The purpose here is to give Claude Desktop direct access to whatever you're logged into in browsers that have these 3 extensions. </p><p>And if you're already trying to use Claude with your personal data that way, welp</p>]]></description><link>https://forum.fedi.dk/post/https://infosec.exchange/users/mttaggart/statuses/116438228974233814</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://infosec.exchange/users/mttaggart/statuses/116438228974233814</guid><dc:creator><![CDATA[mttaggart@infosec.exchange]]></dc:creator><pubDate>Mon, 20 Apr 2026 17:32:54 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 17:15:13 GMT]]></title><description><![CDATA[<p><span><a href="/user/mttaggart%40infosec.exchange">@<span>mttaggart</span></a></span> <br />A long tradition.</p>]]></description><link>https://forum.fedi.dk/post/https://mstdn.social/users/qurlyjoe/statuses/116438159431084717</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://mstdn.social/users/qurlyjoe/statuses/116438159431084717</guid><dc:creator><![CDATA[qurlyjoe@mstdn.social]]></dc:creator><pubDate>Mon, 20 Apr 2026 17:15:13 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 17:10:29 GMT]]></title><description><![CDATA[<p><span><a href="/user/qurlyjoe%40mstdn.social" rel="nofollow noopener">@<span>qurlyjoe</span></a></span> Ethical: no. Legal, almost certainly.</p>]]></description><link>https://forum.fedi.dk/post/https://infosec.exchange/users/mttaggart/statuses/116438140826940136</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://infosec.exchange/users/mttaggart/statuses/116438140826940136</guid><dc:creator><![CDATA[mttaggart@infosec.exchange]]></dc:creator><pubDate>Mon, 20 Apr 2026 17:10:29 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 17:05:39 GMT]]></title><description><![CDATA[<p><span><a href="/user/mttaggart%40infosec.exchange">@<span>mttaggart</span></a></span> <br />Probably a silly question: is that legal/ethical?</p>]]></description><link>https://forum.fedi.dk/post/https://mstdn.social/users/qurlyjoe/statuses/116438121822126779</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://mstdn.social/users/qurlyjoe/statuses/116438121822126779</guid><dc:creator><![CDATA[qurlyjoe@mstdn.social]]></dc:creator><pubDate>Mon, 20 Apr 2026 17:05:39 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 16:42:44 GMT]]></title><description><![CDATA[<p><span><a href="/user/mttaggart%40infosec.exchange">@<span>mttaggart</span></a></span> So if for some reason you want to install the thing, either a VM or dedicated and isolated terminal sounds like the way to go.</p>]]></description><link>https://forum.fedi.dk/post/https://infosec.space/users/catbailey/statuses/116438031688435588</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://infosec.space/users/catbailey/statuses/116438031688435588</guid><dc:creator><![CDATA[catbailey@infosec.space]]></dc:creator><pubDate>Mon, 20 Apr 2026 16:42:44 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 16:15:48 GMT]]></title><description><![CDATA[<p><span><a href="/user/mttaggart%40infosec.exchange">@<span>mttaggart</span></a></span> Just shows how much (little) you can trust these AI companies.</p>]]></description><link>https://forum.fedi.dk/post/https://mstdn.social/users/UkeleleEric/statuses/116437925777740110</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://mstdn.social/users/UkeleleEric/statuses/116437925777740110</guid><dc:creator><![CDATA[ukeleleeric@mstdn.social]]></dc:creator><pubDate>Mon, 20 Apr 2026 16:15:48 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 13:51:57 GMT]]></title><description><![CDATA[<p><span><a href="/user/mttaggart%40infosec.exchange">@<span>mttaggart</span></a></span> </p><p>Wow, that’s nasty. thatprivacyguy’s (Alexander Hanff) report is quite thorough.</p>]]></description><link>https://forum.fedi.dk/post/https://ruby.social/users/stepheneb/statuses/116437360155574450</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://ruby.social/users/stepheneb/statuses/116437360155574450</guid><dc:creator><![CDATA[stepheneb@ruby.social]]></dc:creator><pubDate>Mon, 20 Apr 2026 13:51:57 GMT</pubDate></item><item><title><![CDATA[Reply to I&#x27;ve been seeing this extension all over and wasn&#x27;t sure exactly what folks were doing. on Mon, 20 Apr 2026 13:21:03 GMT]]></title><description><![CDATA[<p>Two of the listed IDs are private (or I couldn't find them in Chrome/Edge), and one is official Claude extension.</p>]]></description><link>https://forum.fedi.dk/post/https://infosec.exchange/users/mttaggart/statuses/116437238651327590</link><guid isPermaLink="true">https://forum.fedi.dk/post/https://infosec.exchange/users/mttaggart/statuses/116437238651327590</guid><dc:creator><![CDATA[mttaggart@infosec.exchange]]></dc:creator><pubDate>Mon, 20 Apr 2026 13:21:03 GMT</pubDate></item></channel></rss>