Websites Can Detect What Chrome Extensions You've Installed

[wraggster]

A Polish security researcher, Krzysztof Kotowicz, makes an worrisome entry in his blog: with a few lines of Javascript, any web site could list the extensions installed in Chrome (http://blog.kotowicz.net/2012/02/intro-to-chrome-addons-hacking.html) (and the other browsers of the Chromium family). Proof of concept is provided here (http://koto.github.com/blog-kotowicz-net-examples/chrome-addons/enumerate.html). As there are addons which deal with very personal things like pregnancy or religion, the easiness of access to those very private elements of your life is really troubling."Note: the proof of concept works, so don't click that link if the concept bothers you.

http://yro.slashdot.org/story/12/03/17/0142219/websites-can-detect-what-chrome-extensions-youve-installed