Private messages from 81,000 hacked Facebook accounts for sale
Maybe it's time for the browsers to put more effort into extension network security.1) Every extension has to declare up front what urls it needs to communicate to.2) Every extension has to provide schema of any data it intends to send out of browser.3) Browser locally logs all this comms.4) Browser blocks anything which doesn't match strict key values & value values and doesn't leave browser in plain text.