Why The Permission List Doesn't Resolve This
A browser extension keeps calling home — is that something to worry about?
The question arises for anyone who has ever opened a network monitor with extensions installed. Traffic from an empty tab looks alarming, and figuring out who is sending it and why is tricky at first glance. It is worth learning how to distinguish a benign update from telemetry.
I set up a popular add-on for tabs, and everything works. But the network monitor shows it pinging some third-party domain once a minute, even when the tab sits idle. The description doesn't mention it. Is this tracking, or am I overthinking it?
The first move is to separate yours from theirs: turn off all extensions at once and see whether the background noise disappears. If it goes quiet, the source is one of them, and you switch each back on individually until the traffic reappears. That isolates the culprit in a couple of minutes, no guessing.
If there is still no answer, a simple test helps: a necessary update goes to the author's domain and to the point, while telemetry runs constantly, in the background, to a third-party server. The second type almost always hides in settings behind a toggle nobody knows about.
Why the permission list doesn't resolve this
Access to tabs in the manifest and sending their list out are different things, and a single permission line cannot distinguish them. On paper the add-on truthfully declares access; what it does with that access isn't apparent from the manifest. So look at the traffic, not the permission list.
It is easier not to guess every time and keep a webmaster toolkit close at hand — ones that say plainly they collect nothing. And this tab chore is effortless to close with a telemetry-free replacement — domain reputation through the VirusTotal API, works the same and doesn't call home.
Reviews like this are useful not for paranoia but for the habit: a few minutes with the network monitor after installing, and "pinging somewhere" turns into a clear picture of what goes where.
