doesn't tellusers aboutupdates toprivacypolicycontactemail isnotmonitoredhasrandomdomainsfor exfilwasopensourcethenswitched toclosedexfiltratesfull URLsmisleadsusersabout datacollectionis afeaturedextensionfrom averifiedpublishercollectsshoppingdatarequirespermissionstochange/readall sitesMisleadingprivacypolicyremindersaboutaccepting"opt in"privacy policynoprivacypolicyRatedover 4starsexecutescorefunctionswellcommitsaffiliatefraudexfiltratesAI chatsdarkpattern ononboardingusesWASMobfuscatesnetworkrequestsis in theprivacy andsecuritycategoryowned byadatabrokergotpopularthen wassold offtargetedtowardskidsdoesn't tellusers aboutupdates toprivacypolicycontactemail isnotmonitoredhasrandomdomainsfor exfilwasopensourcethenswitched toclosedexfiltratesfull URLsmisleadsusersabout datacollectionis afeaturedextensionfrom averifiedpublishercollectsshoppingdatarequirespermissionstochange/readall sitesMisleadingprivacypolicyremindersaboutaccepting"opt in"privacy policynoprivacypolicyRatedover 4starsexecutescorefunctionswellcommitsaffiliatefraudexfiltratesAI chatsdarkpattern ononboardingusesWASMobfuscatesnetworkrequestsis in theprivacy andsecuritycategoryowned byadatabrokergotpopularthen wassold offtargetedtowardskids

Malicious Extension Bingo - Call List

(Print) Use this randomly generated list as your call list when playing the game. There is no need to say the BINGO column name. Place some kind of mark (like an X, a checkmark, a dot, tally mark, etc) on each cell as you announce it, to keep track. You can also cut out each item, place them in a bag and pull words from the bag.


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
  1. doesn't tell users about updates to privacy policy
  2. contact email is not monitored
  3. has random domains for exfil
  4. was opensource then switched to closed
  5. exfiltrates full URLs
  6. misleads users about data collection
  7. is a featured extension
  8. from a verified publisher
  9. collects shopping data
  10. requires permissions to change/read all sites
  11. Misleading privacy policy
  12. reminders about accepting "opt in" privacy policy
  13. no privacy policy
  14. Rated over 4 stars
  15. executes core functions well
  16. commits affiliate fraud
  17. exfiltrates AI chats
  18. dark pattern on onboarding
  19. uses WASM
  20. obfuscates network requests
  21. is in the privacy and security category
  22. owned by a databroker
  23. got popular then was sold off
  24. targeted towards kids