Steam Sheriffとは何ですか？

Steam Sheriffはzma4580によって開発されたChromeの拡張機能で、その主な機能は「Checks URLs visited by user to help prevent Steam phishing attacks」です。

拡張機能のスクリーンショット

Steam Sheriff拡張機能のCRXファイルをダウンロード

Steam Sheriff拡張子のファイルをcrx形式でダウンロードし、ブラウザにChrome拡張機能を手動でインストールするか、crxファイルを友達と共有して簡単にChrome拡張機能をインストールします。

拡張機能の使用方法

Steam Sheriff helps gamers using the Steam platform by checking URLs as they are visited to see if they are potentially impersonating a 'brand'.

Malware/Phishing actors make websites that closely resemble a 'brand'. For example, the legitimate Steam website is www.steamcommunity.com. Phishers leverage 'homograph' attacks to trick you to clicking a URL that you think you trust. So, st3amcommunity.com or steamcomunity.com might look legitimate to a human, but very different for a computer.

In order to detect these attacks, Steam Sheriff uses a combination of techniques to find out the 'similarity' of a target compared to a white list. This whitelist are common websites collected from feedback from the community that have also been used in attacks in the past. The list is as follows:

'gyazo.com',
'flickr.com',
'imgur.com',
'photobucket.com',
'tinypic.com',
'dota2lounge.com',
'csgolounge.com',
'steamcommunity.com',
'csgoticket.com',
'csgojackpot.com',
'csgoskins.net',
'mumble.info',
'teamspeak.com',
'raidcall.com',
'ventrilo.com'

This list will be updated periodically as the tactics of the phishers change.

**NOTE**
There might be issues with steamcommunity and websites that use akamai where it wont load resources if its being loaded by content distribution networks (CDNs). If something breaks, please e-mail the contact e-mail listed on this extension page or the warning page.

Features:
- 'Real-time' detection of potential phishing websites
- Option menu when a website is potentially bad
- 'Continue Once' which allows the website to be visited for 5 minutes before Steam Sheriff alerts on it again
- 'Continue & Whitelist' which adds the website to a user-defined whitelist if there is a false positive. This gets cleared if Chrome browser data is cleared
- 'Get me out of here!' Redirect to google.com

Upcoming Features:
- Reporting mechanism
- Configuration page to edit whitelists and blacklists

Reporting:
-If there is ever a false positive, you can report it to [email protected]. A false positive results from Steam Sheriff thinking that a legitimate website is a bad website.
-If there is ever a false negative, you can report it to [email protected]. A false negative results from Steam Sheriff *NOT* alerting on a bad website and thinking its a legitimate website.

DONATION!
Please visit https://hackandflash.com/?page_id=110 to donate and help me pay for hosting feeds, app dev time and also paying the my amazing designer/UX friends who help make Steam Sheriff look professional and clean.

拡張機能の基本情報

名前	Steam Sheriff
ID	gepneajfhahnllbbdfiamgbifcikpoie
公式URL	https://chrome.google.com/webstore/detail/steam-sheriff/gepneajfhahnllbbdfiamgbifcikpoie
説明	Checks URLs visited by user to help prevent Steam phishing attacks
ファイルサイズ	155 KB
インストール数	34
現在のバージョン	0.3
最終更新日	2015-08-06
公開日	2015-08-06
評価	1.00/5 合計 1 レビュー
開発者	zma4580
支払い方法	free
対応言語	en
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "manifest_version": 2, "content_security_policy": "script-src 'self'; object-src 'self';", "name": "Steam Sheriff", "description": "Checks URLs visited by user to help prevent Steam phishing attacks", "author": "Zack Allen", "version": "0.3", "background": { "scripts": [ "js\/background.js", "js\/jdist.js", "js\/jquery-2.1.4.min.js", "js\/jquery-ui.js", "js\/acc.js" ] }, "permissions": [ "webRequest", "", "webRequestBlocking" ], "web_accessible_resources": [ "js\/*.js", "warning.js", "warning.html" ], "icons": { "16": "assets\/16_logo.png", "48": "assets\/48_logo.png", "128": "assets\/128_logo.png" } }