Is IDmelon Accesskey safe?
IDmelon Accesskey lets any website ask it for the UID of the smart card tapped on your reader.
The extension talks to a connected smart card reader through the Smart Card Connector app. Its externally_connectable setting allows any web page to send a getCardUID message, and the extension replies with the card's UID without checking which site asked. A card has to be tapped within 30 seconds for a UID to be returned.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itIDmelon Technologies Inc. - 2 other listings from the same operator, none carrying a finding
IDmelon Technologies Inc. - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 5k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
See, disable and uninstall your other extensions, including your security ones
management