Private messages from 81,000 hacked Facebook accounts for sale
Maybe it's time for the browsers to put more effort into extension network security.<p>1) Every extension has to declare up front what urls it needs to communicate to.<p>2) Every extension has to provide schema of any data it intends to send out of browser.<p>3) Browser locally logs all this comms.<p>4) Browser blocks anything which doesn't match strict key values & value values and doesn't leave browser in plain text.