[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

카카오 HLS 매니저

Version 0.0.3 View in Chrome Web Store

Last scanned: 18 days ago | force re-scan

Extension Details

Developer: http://potplayer.daum.net/

Rating: 1.5 ★ (34 ratings)

Users: 60,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has 60,000 users, indicating some level of adoption, but the extremely low rating of 1.5 stars from 34 reviews is a significant red flag. The developer is associated with PotPlayer (http://potplayer.daum.net/), which is a legitimate media player, providing some credibility. However, the lack of recent update information and poor user feedback raises concerns about maintenance and functionality.

Concerns:

- Extremely poor user rating (1.5/5 stars) suggests significant functionality or reliability issues

- Uses outdated Manifest V2, which has weaker security protections

- Permissions include localhost access (127.0.0.1 and localhost), which could potentially interact with local services

- Access to Kakao streaming domains suggests it modifies video streaming behavior

- Low user satisfaction combined with streaming-related permissions could indicate the extension doesn't work as intended or causes issues

Recommendations:

Given the poor user reviews and streaming-related functionality, exercise caution before installing. The localhost permissions, while not inherently malicious, combined with the low rating suggest this extension may not function properly. Consider looking for alternative HLS management tools with better user feedback. If you must use this extension, test it in a separate Chrome profile first to isolate any potential issues. Monitor your system for unusual behavior and be prepared to remove it if problems arise.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "카카오 HLS 매니저",
  "icons": {
    "16": "img/icon_16.png",
    "48": "img/icon_48.png",
    "256": "img/icon_256.png"
  },
  "version": "0.0.3",
  "background": {
    "scripts": [
      "background.js"
    ],
    "persistent": true
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "고화질 라이브 방송 시청을 위한 프로그램",
  "permissions": [
    "http://127.0.0.1/",
    "http://localhost/",
    "*://*.play.kakao.com/",
    "*://kakaolive.gscdn.com/"
  ],
  "manifest_version": 2,
  "externally_connectable": {
    "matches": [
      "*://*.devel.kakao.com/*",
      "*://*.kakao.com/*",
      "*://*.dev.daum.net/*",
      "*://*.daum.net/*"
    ]
  }
}

by ✦ Astarte

https://developer.chrome.com/extensions/messaging#external-webpage	https://developer.chrome.com/extensions/runtime
https://developer.chrome.com/extensions/xhr	http://127.0.0.1:7283/rtc/check
https://clients2.google.com/service/update2/crx	http://127.0.0.1/

카카오 HLS 매니저

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (6 total):

Raw Manifest

Detections

Manifest Findings