1 post
A single keyword handed full control of Chrome's most popular VPN extension to any website. The failure is trust by string, not a bug.