Is TwiHD - вернет качество 1080p на Twitch safe?

Findings

return await httpClient.post(`https://${apiBaseUrl}/api/v2/get-proxy`, {  json: {    product: 'twihd',    device_id: deviceId,    device_ip: deviceIp ?? 'unknown',    on_fail: onFail,    with_auth: featureFlags[FeatureKey.ProxyAuth]  }}).json();

getOrCreateClientId() {  return (async () => {    let clientId = (await chrome.storage.local.get('clientId')).clientId;    if (!clientId) {      clientId = self.crypto.randomUUID();      await chrome.storage.local.set({ clientId });    }    return clientId;  })();}

const response = await fetch(  'https://www.google-analytics.com/mp/collect' +  '?measurement_id=G-XCPV2XK66M&api_secret=<redacted>',  { method: 'POST', body: JSON.stringify(payload) });

const { configsBaseUrl } = await getState(StateKey.ConfigsBaseUrl);const registryUrl = configsBaseUrl === 'https://storage.yandexcloud.net/vpnn-web-configs/'  ? new URL('twihd/pca-scripts-registry-yandex.json', configsBaseUrl)  : new URL('twihd/pca-scripts-registry-google.json', 'https://storage.googleapis.com/');const registry = await httpClient.get(registryUrl.toString()).json();

const pacUrl = (isLitePAC && registry.premiumLite) ? registry.premiumLite : registry.premium;const pacData = await fetchAndDecompress(pacUrl);// ...chrome.proxy.settings.set({  value: { mode: 'pac_script', pacScript: { data: buildPacScript({ host, port, pacString: pacData }) } },  scope: 'regular'});

if (!configsBaseUrl || configsBaseUrl === 'https://storage.googleapis.com/') {  await setState({ [StateKey.ConfigsBaseUrl]: 'https://storage.yandexcloud.net/vpnn-web-configs/' });}

What it can do

Permissions this extension asks for, as declared in version 1.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

• Read and change your data on vrbl.space

  https://vrbl.space/* and 1 more

• Read and change your data on uubb.website

  https://uubb.website/* and 1 more

• Read and change your data on cukubst.top

  https://cukubst.top/* and 1 more

• Read and change your data on cuknrz.top

  https://cuknrz.top/* and 1 more

• Read and change your data on cukvrub.top

  https://cukvrub.top/* and 1 more

• Read and change your data on cukptk.website

  https://cukptk.website/*

• Read and change your data on youtube.com

  https://*.youtube.com/*

• Read and change your data on witch.tv

  https://*.witch.tv/*

• Read and change your data on test.uubb.website

  https://test.uubb.website/*

• Read and change your data on ptkdfjnflmpalkfpkehjgopmjldhjhgb.click

  https://ptkdfjnflmpalkfpkehjgopmjldhjhgb.click/*

• Read and change your data on sentry-sel-4.vpnn.loan

  *://sentry-sel-4.vpnn.loan/*

• Read and change your data on nrz.homes

  *://*.nrz.homes/*

• Read and change your data on youtu.be

  *://*.youtu.be/*

• Read and change your data on googlevideo.com

  *://*.googlevideo.com/*

• Read and change your data on play.google.com

  *://*.play.google.com/*

• Read and change your data on ytimg.com

  *://*.ytimg.com/*

• Read and change your data on vpnn.loan

  *://*.vpnn.loan/*

• Read and change your data on yandexcloud.net

  *://*.yandexcloud.net/*

• Read and change your data on twhd.online

  *://*.twhd.online/*

• Read and change your data on twhd.site

  *://*.twhd.site/*

• Route all of your browsing through a server of its choosing

  proxy

• Store data in your browser

  storage

• Watch every request your browser makes

  webRequest

• Act on the current tab, but only after you click the extension

  activeTab

• See the address and title of every tab you have open

  tabs

• Schedule its own background tasks

  alarms

• See, disable and uninstall your other extensions, including your security ones

  management

• Read and change cookies, including the ones that keep you signed in

  cookies

Where it sends data

Destinations our analysis observed TwiHD contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

• www.google-analytics.comwidely used

  TwiHD sends data to www.google-analytics.com. A widely used service: 346 other extensions we have analysed send data here.

• storage.googleapis.com

  TwiHD sends data to storage.googleapis.com. 7 other extensions we have analysed send data here.

• sentry-sel-4.vpnn.loan

  TwiHD sends data to sentry-sel-4.vpnn.loan. No other extension we have analysed sends data here.

• uubb.website

  TwiHD sends data to uubb.website. No other extension we have analysed sends data here.