Is Meet Plus safe?

Question

Is Meet Plus safe?

Accepted Answer

Meet Plus is high risk. Our dynamic analysis captured a WebSocket connection to wss://meet-plus.com/googlemeetplus on every Google Meet session. The first message sent was a socket.io 'join' event whose payload included the field email with your full Google account email address — for example, robertfinwitch@gmail.com. The extension extracts this address by scanning Google Meet's internal AF_initDataChunkQueue data structure using an email regex, then transmits it without any consent prompt each time you enter a meeting room. Our dynamic analysis captured the WebSocket join event sent by Meet Plus on every meeting session. The payload included a gid field containing a long alphanumeric string — your Google user ID — extracted from the URL of your Google profile picture. The extension parses your avatar URL from Google Meet's internal data structures, strips the path to isolate this identifier, stores it as window.userGID, and transmits it alongside your email and meeting details on every join.

Is Meet Plus for Google Meet safe?

Findings