Is saat netizen safe?

Question

Accepted Answer

saat netizen is critical risk. The extension monitors every browser tab for cookies named 'ct'. Each time you switch focus to a tab or a 'ct' cookie is explicitly set on any site, the extension immediately forwards that cookie's value — along with the full tab URL and domain path — to an HTTP server running on your local machine. Dynamic analysis confirmed 1,460 POST requests to ports 8374–8378 on localhost during a normal browsing session. The extension transmits your browsing history to a local server process using unencrypted HTTP (http://127.0.0.1:8374). All 42 requests captured in our dynamic analysis session used the http:// scheme with no TLS. Tab URLs, tab IDs, cookie values (filtered for a specific token name), and window focus events are all sent in cleartext. While the traffic targets 127.0.0.1 (your own machine), cleartext HTTP on loopback can be intercepted by other processes on the same computer and, on shared or multi-user systems, may be accessible across the local network depending on OS configuration. 1 further issue was flagged.

Is saat netizen safe?

Findings