usesWASMRatedover 4starsexfiltratesAI chatsdarkpattern ononboardingmisleadsusersabout datacollectiontargetedtowardskidsobfuscatesnetworkrequestsnoprivacypolicycollectsshoppingdatais afeaturedextensionwasopensourcethenswitched toclosedrequirespermissionstochange/readall sitesremindersaboutaccepting"opt in"privacy policydoesn't tellusers aboutupdates toprivacypolicyfrom averifiedpublisherhasrandomdomainsfor exfilis in theprivacy andsecuritycategoryexfiltratesfull URLscontactemail isnotmonitoredMisleadingprivacypolicygotpopularthen wassold offowned byadatabrokercommitsaffiliatefraudexecutescorefunctionswellusesWASMRatedover 4starsexfiltratesAI chatsdarkpattern ononboardingmisleadsusersabout datacollectiontargetedtowardskidsobfuscatesnetworkrequestsnoprivacypolicycollectsshoppingdatais afeaturedextensionwasopensourcethenswitched toclosedrequirespermissionstochange/readall sitesremindersaboutaccepting"opt in"privacy policydoesn't tellusers aboutupdates toprivacypolicyfrom averifiedpublisherhasrandomdomainsfor exfilis in theprivacy andsecuritycategoryexfiltratesfull URLscontactemail isnotmonitoredMisleadingprivacypolicygotpopularthen wassold offowned byadatabrokercommitsaffiliatefraudexecutescorefunctionswell

Malicious Extension Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. uses WASM
  2. Rated over 4 stars
  3. exfiltrates AI chats
  4. dark pattern on onboarding
  5. misleads users about data collection
  6. targeted towards kids
  7. obfuscates network requests
  8. no privacy policy
  9. collects shopping data
  10. is a featured extension
  11. was opensource then switched to closed
  12. requires permissions to change/read all sites
  13. reminders about accepting "opt in" privacy policy
  14. doesn't tell users about updates to privacy policy
  15. from a verified publisher
  16. has random domains for exfil
  17. is in the privacy and security category
  18. exfiltrates full URLs
  19. contact email is not monitored
  20. Misleading privacy policy
  21. got popular then was sold off
  22. owned by a databroker
  23. commits affiliate fraud
  24. executes core functions well