skysight-inc/HackerNews huggingface dataset:
Yeah parts of the article would still be as valid if this was about regular extensions.

The main difference is that AI extension, by design, send the content of the pages you browse to a server.

A malicious "calculator" extension could also send all the content to a server, and extension users don't really have an idea of what each extension is actually doing.

So skip the "Malware posing as AI browser extension" section, it's same kind of security issues as a malware calculator extension.

The legitimate AI extension's problems are more interesting.

Article wastes a bit more time on other security issues you get from using AI LLM in general. Those apply whether you're using a browser extension or chat.openai.com directly.

The valid point that applies to narrowly AI browser extension are:

1) it could send sensitive data you wouldn't have sent otherwise. Most people would know what they're doing when they explicitly paste the stuff on chat.openai.com. But when it's now automated via the extension DOM scraping, it's a bit harder to realize how much you're giving away.

2) And the hidden text prompt injection. That's interesting as now your attacker could be the website you browse, if you have configured too many plugins (Zapier plugin giving access to your email)

These 2 parts of TFA are imo novel security issues that only exist with AI browser extension, and are interesting.
Link appears to just lead to the Manjaro home page. Is there something new / exciting that HN needs to know?
OP Here. I can understand. I would be skeptical too

I have been using this tool just for myself for the last few months. The project is intentionally built for longevity (striving to keep the project for decades, if there are serious users). The costs to run are negligible, and I haven't thought much about monetizing. At this point, evaluating if there is enough interest in the tool
You don't need people to sell ads for all but the biggest accounts.

Google has a completely automated ad sales system for even mid-size companies (~$100k/year ad spend) from what I understand.
Not to mention about half the chargers in my area (in California, of all places) don't take Visa cards, but they take some other credit card networks. Unfortunately all of my cards are Visa. So the app is the only option. But a lot of the time the app fails to start the charging. Perhaps the chargers have connectivity issues.
To be fair, I don't think this person ended up being involved in that decision. I've been in contact with them since and there doesn't seem to be any animosity.

There are plenty of more obvious reasons I was let go:

- I was in the last cohort hired before the hiring freeze.

- I had a terrible fit with my first team (this manager was on that team, but it wasn't with them) and put in for a transfer after about 3 months.

- The VP for that area came down pretty hard on me directly because this represented a permanent loss in headcount and made it clear that they'd be extremely upset if I pushed for it.

- I put in my transfer request anyway (the day that they announced transfers would be frozen), and was actually transferred about 5 minutes before the freeze happened.

- In my new team my new manager gave their two week notice on my first day.

- I enjoyed the work, but the new manager and I never really got along.

- I was one of two people on the team, the other person was in the same time zone as the new manager, and I wasn't.

Frankly I'd have been shocked if I hadn't gotten laid off.
Joe Biden Allegedly Paid $5M to Fire Ukrainian Prosecutor