Vad är Spectroscope?

Spectroscope är en Chrome-tillägg utvecklad av Lukas Weichselbaum, och dess huvudfunktion är "Search for endpoints potentially vulnerable to Spectre.".

Tilläggsskärmbilder

Ladda ner Spectroscope-förlängningens CRX-fil

Ladda ner Spectroscope-filändelser i crx-format, installera Chrome-tillägg manuellt i webbläsaren eller dela crx-filerna med vänner för att enkelt installera Chrome-tillägg.

Användarmanual för Tillägg

Spectroscope is a prototype extension for security engineers and web developers to help track down application resources which aren't protected from being embedded by other websites. Such resources can, in some cases, be exfiltrated by malicious sites making use of CPU-level information leaks on users' devices, such as the Spectre vulnerability.

The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools "Spectroscope" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.

Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.

Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum

Grundläggande Information om Tillägg

Namn	Spectroscope
ID	idppnaadbabknjeaifkegolcciafchpp
Officiell webbadress	https://chromewebstore.google.com/detail/spectroscope/idppnaadbabknjeaifkegolcciafchpp
Beskrivning	Search for endpoints potentially vulnerable to Spectre.
Filstorlek	5.5 MB
Antal Installationer	232
Aktuell Version	0.1.0
Senast Uppdaterad	2021-08-19
Publiceringsdatum	2021-03-07
Betyg	5.00/5 Totalt 2 Betyg
Utvecklare	Lukas Weichselbaum
E-post	[email protected]
Betalningssätt	free
Stödda Språk	en
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "name": "Spectroscope", "version": "0.1.0", "description": "Search for endpoints potentially vulnerable to Spectre.", "icons": { "128": "icon128.png" }, "manifest_version": 2, "devtools_page": "devtools.html", "permissions": [ "cookies", "http:\/\/\/", "https:\/\/\/", "storage" ], "background": { "persistent": false, "scripts": [ "background.js" ] } }