truster

Prevent the rendered web-pages from loading resources hosted in untrusted, writable S3 buckets.

Truster Chrome Extension: Safeguarding From Unauthorized S3 Buckets

Truster Chrome extension is a robust tool designed to protect users from security threats posed by pages loading resources from unprotected, writable AWS S3 buckets. By communicating with our backend, truster verifies and intervenes if resources requested come from an unsafe bucket, preventing these from being loaded, thus enhancing your browsing experience's safety.

Download

Extension stats

By: conand

Users: 2,000+

Rating: 5.00

(1)

Version: 0.1 (Last updated: 2018-12-22)

Creation date: 2018-12-17

Risk impact: High risk impact

Risk likelihood:

Low risk likelihood

Manifest version: 2

Permissions:

storage
webRequest
webRequestBlocking
webNavigation
<all_urls>

Size: 22.61K

Ranking

# 22,828 ▲ 98

Other rankings

#7063 in Developer Tools ▼ 22

Other platforms

Not available on Android

Not available on Firefox

Not available on Edge

Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

Analyze keywords

Websites often load assets (CSS, JS,..) hosted in AWS S3 buckets. Unfortunately, sometimes such buckets are misconfigured allowing unauthorized users to overwrite their files. This results in the possibility for attackers to inject malicious content (for instance malicious cryptomining JS) that gets delivered to the website's visitors. To protect from this threat, truster, communicating with our backend (https://bucketsec.necst.it/), verifies if the resources requested from the visited websites come from an untrusted, writable, bucket, preventing the loading of such resources.