Is Speed Dial safe?
Speed Dial fetches a remote affiliate code on install, appends it to Yahoo searches, and screenshots bookmarked pages in hidden windows.
When first installed, the extension contacts addonsearch.net to retrieve a partner tracking code ('ref') and stores it locally. Every search submitted through the new tab page is routed through Yahoo with hardcoded partner identifiers and the remotely fetched ref value appended. The extension also opens off-screen 10×10 browser windows at off-screen coordinates and uses tabs.captureVisibleTab to take screenshots of bookmarked URLs, which may include authenticated page state.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Speed Dial captures off-screen page screenshots for bookmark previews.
Adding/editing a bookmark, or when one lacks a preview, Speed Dial opens the URL in an off-screen popup and screenshots it for the tile.
The preview can include the page URL and content, including authenticated state if logged in.
The user adds or edits a bookmark, or opens the new-tab page with a saved bookmark that lacks a preview.
Speed Dial opens the bookmark URL off-screen, captures the visible tab, and saves the PNG data as the tile preview.
| Field | Value | Why it matters | |
|---|---|---|---|
Page URL | https://mail.example.com/inbox (illustrative) | Identifies which bookmarked page was opened for the preview capture. | |
Visible page content | Signed-in dashboard preview image (illustrative) | Shows what was visible in the opened page, which can include signed-in content when the browser profile is already logged in. |
Dynamic analysis confirmed the extension has broad URL and tab permissions and uses an off-screen popup with visible-tab capture to generate bookmark preview images.