Spectroscope

Search for endpoints potentially vulnerable to Spectre.

Spectroscope란 무엇입니까?

Spectroscope은(는) Lukas Weichselbaum에 의해 개발된 Chrome 확장 프로그램으로, 주요 기능은 "Search for endpoints potentially vulnerable to Spectre."입니다.

확장 프로그램 스크린샷

screenshot
screenshot
screenshot
screenshot
screenshot

Spectroscope 확장 프로그램 CRX 파일 다운로드

크롬 확장 프로그램을 crx 형식으로 다운로드하여 브라우저에 수동으로 설치하거나 crx 파일을 친구들과 공유하여 쉽게 크롬 확장 프로그램을 설치하세요.

확장 프로그램 사용 설명서

                        Spectroscope is a prototype extension for security engineers and web developers to help track down application resources which aren't protected from being embedded by other websites. Such resources can, in some cases, be exfiltrated by malicious sites making use of CPU-level information leaks on users' devices, such as the Spectre vulnerability.

The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools "Spectroscope" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.

Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.

Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum                    

확장 프로그램 기본 정보

이름 Spectroscope Spectroscope
ID idppnaadbabknjeaifkegolcciafchpp
공식 URL https://chromewebstore.google.com/detail/spectroscope/idppnaadbabknjeaifkegolcciafchpp
설명 Search for endpoints potentially vulnerable to Spectre.
파일 크기 5.5 MB
설치 횟수 232
현재 버전 0.1.0
최근 업데이트 2021-08-19
출시 날짜 2021-03-07
평점 5.00/5 총 2 개의 평점
개발자 Lukas Weichselbaum
이메일 [email protected]
결제 유형 free
지원되는 언어 en
manifest.json
{
    "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
    "name": "Spectroscope",
    "version": "0.1.0",
    "description": "Search for endpoints potentially vulnerable to Spectre.",
    "icons": {
        "128": "icon128.png"
    },
    "manifest_version": 2,
    "devtools_page": "devtools.html",
    "permissions": [
        "cookies",
        "http:\/\/*\/*",
        "https:\/\/*\/*",
        "storage"
    ],
    "background": {
        "persistent": false,
        "scripts": [
            "background.js"
        ]
    }
}