Loom %E2%80%93 Screen Recorder Sc

What This Extension Does

The Loom – Screen Recorder Sc extension allows users to record their screen and camera with a single click, making it easy to share content instantly via a link.

Permissions Explained

• activeTab: Allows the extension to access the currently active tab in the browser.

+ Standard for extensions that interact with web pages.

• alarms: Enables the extension to schedule alarms or notifications.

+ Unusual for this type of extension, but might be used for reminders or notifications related to screen recording.

• contextMenus: Allows the extension to add custom context menu items in the browser.

+ Standard for extensions that interact with web pages.

• cookies: Enables the extension to read and write cookies on behalf of the user.

+ Unusual for this type of extension, but might be used to store authentication tokens or other data related to screen recording.

• desktopCapture: Allows the extension to capture the user's desktop screen.

+ Standard for extensions that provide screen recording functionality.

• scripting: Enables the extension to execute scripts in web pages.

+ Unusual for this type of extension, but might be used to inject custom JavaScript code into web pages being recorded.

• storage: Allows the extension to store data locally on the user's device.

+ Standard for extensions that need to store settings or other data related to their functionality.

• system.cpu, system.display: Enables the extension to access system-level information about CPU and display settings.

+ Unusual for this type of extension, but might be used to optimize screen recording performance.

• tabCapture: Allows the extension to capture the user's tab content.

+ Standard for extensions that provide screen recording functionality.

• webNavigation, webRequest: Enables the extension to intercept and modify web requests.

+ Unusual for this type of extension, but might be used to inject custom JavaScript code into web pages being recorded or to optimize screen recording performance.

• <all_urls>: Grants the extension access to all URLs on the internet.

+ Critical risk: This permission is unusually broad and could potentially allow the extension to access sensitive data or perform malicious actions.

• *://.loom.com/: Grants the extension access to Loom's own domain and subdomains.

+ Standard for extensions that interact with their own servers.

What We Found in the Code

• eval() used: The extension uses eval() to execute arbitrary code, which can be a security risk if not properly sanitized. However, without more context, it's difficult to determine whether this is being used maliciously or as part of legitimate functionality.
• Makes HTTP requests: The extension makes HTTP requests to various domains, including Loom's own servers and third-party services like GitHub and Google Drive. This is a normal pattern for extensions that need to communicate with external services.
• Listens to keyboard events: The extension listens to keyboard events, which could be used to inject custom shortcuts or hotkeys into the user's browser. However, without more context, it's difficult to determine whether this is being used maliciously or as part of legitimate functionality.
• Potential data exfiltration pattern: The extension uses a potential data exfiltration pattern, which involves storing data locally on the user's device and then transmitting it to external servers. While this is not necessarily malicious in itself, it does raise concerns about data privacy.

External Connections

The extension communicates with various domains, including:

• Loom's own servers (loom.com, support.loom.com, stage.loom.com)
• Third-party services like GitHub (github.com), Google Drive (drive.google.com), and Slack (app.slack.com)
• Other external domains like w3.org, s3.amazonaws.com, cdn.loom.com, and bit.ly

These connections appear expected for the extension's functionality, which involves screen recording and sharing content with others.

Things to Consider

Based on the extension's name, description, and permissions, it appears that Loom – Screen Recorder Sc is designed to provide a convenient way for users to record their screens and share content instantly. However, some of the permissions granted to this extension are unusually broad, including <all_urls> and cookies. Additionally, the use of eval() and potential data exfiltration patterns raise concerns about security and data privacy.

Users should carefully consider whether they trust this extension with such broad permissions and whether the benefits of using it outweigh the potential risks.