Is Similar Sites safe?

Question

Accepted Answer

Similar Sites is critical risk. Similar Sites phones home every 60 seconds to download a configuration file from its own server. That configuration tells the extension which websites to intercept, what data to extract from network requests and WebSocket connections, and where to forward it — including to alternate servers. The server can add or change these instructions at any time, without a consent prompt and without any update going through the Chrome Web Store review process. A persistent device ID is assigned at install and sent with every config poll, enabling the server to correlate your configuration to your device over time. On installation, Similar Sites generates a persistent random identifier and stores it in the browser. This identifier is included in every telemetry request sent to data-api.similarsites.com, enabling the extension's servers to correlate your browsing activity across sessions and browser restarts without your knowledge or consent.

Is Similar Sites - Discover Related Websites safe?

Findings