Is KuroTwi safe?
KuroTwi embeds service API credentials and sends Twitter, short-link, and translation requests to third-party APIs.
The extension uses hardcoded Twitter OAuth consumer credentials when it signs Twitter API requests. When users expand bit.ly or j.mp links or use translation, it sends the shortened URL to Bitly and the requested text to Microsoft Translator.
Who publishes itKEN1 - no other listings under this identity
KEN1 - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 2.0.3.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on api.twitter.com
https://api.twitter.com/*
Read and change your data on upload.twitter.com
https://upload.twitter.com/*
Read and change your data on ext.nicovideo.jp
https://ext.nicovideo.jp/*
Read and change your data on every site you visit
*://*/*
Show you desktop notifications
notifications
See the address and title of every tab you have open
tabs
Where it sends data
Destinations our analysis observed KuroTwi contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.twitter.com
KuroTwi sends data to api.twitter.com. 3 other extensions we have analysed send data here.
- api.bitly.com
KuroTwi sends data to api.bitly.com. No other extension we have analysed sends data here.
- api.microsofttranslator.com
KuroTwi sends data to api.microsofttranslator.com. No other extension we have analysed sends data here.