is in theprivacy andsecuritycategoryfrom averifiedpublisherobfuscatesnetworkrequestsowned byadatabrokermisleadsusersabout datacollectionis afeaturedextensionRatedover 4starsgotpopularthen wassold offdoesn't tellusers aboutupdates toprivacypolicyexecutescorefunctionswellcommitsaffiliatefraudcontactemail isnotmonitoredexfiltratesAI chatstargetedtowardskidsusesWASMexfiltratesfull URLsMisleadingprivacypolicyremindersaboutaccepting"opt in"privacy policycollectsshoppingdatawasopensourcethenswitched tocloseddarkpattern ononboardinghasrandomdomainsfor exfilnoprivacypolicyrequirespermissionstochange/readall sitesis in theprivacy andsecuritycategoryfrom averifiedpublisherobfuscatesnetworkrequestsowned byadatabrokermisleadsusersabout datacollectionis afeaturedextensionRatedover 4starsgotpopularthen wassold offdoesn't tellusers aboutupdates toprivacypolicyexecutescorefunctionswellcommitsaffiliatefraudcontactemail isnotmonitoredexfiltratesAI chatstargetedtowardskidsusesWASMexfiltratesfull URLsMisleadingprivacypolicyremindersaboutaccepting"opt in"privacy policycollectsshoppingdatawasopensourcethenswitched tocloseddarkpattern ononboardinghasrandomdomainsfor exfilnoprivacypolicyrequirespermissionstochange/readall sites

Malicious Extension Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. is in the privacy and security category
  2. from a verified publisher
  3. obfuscates network requests
  4. owned by a databroker
  5. misleads users about data collection
  6. is a featured extension
  7. Rated over 4 stars
  8. got popular then was sold off
  9. doesn't tell users about updates to privacy policy
  10. executes core functions well
  11. commits affiliate fraud
  12. contact email is not monitored
  13. exfiltrates AI chats
  14. targeted towards kids
  15. uses WASM
  16. exfiltrates full URLs
  17. Misleading privacy policy
  18. reminders about accepting "opt in" privacy policy
  19. collects shopping data
  20. was opensource then switched to closed
  21. dark pattern on onboarding
  22. has random domains for exfil
  23. no privacy policy
  24. requires permissions to change/read all sites