Chrome extension update seems fishy?

[BIGMERVE]

I've used the chrome extension "Mt Gox Peek" for a few months now and it works great. All it does is show the current price of bitcoins in the top of the browser. However, today it's asking for permission to update the terms. The exact quote is:

 "The newest version of Mt. Gox Peek has been disabled because it requires more permissions. It can now - Access your data on mtgox.com and www.forex.com".

That seems bad to me. It's just supposed to display the price, why would it need to access my mtgox data? And what the hell does forex have to do with anything?

[1715309561]

1715309561

[1715309561]

1715309561

[BIGMERVE]

I would save the crx file and rename that from crx to zip, then look at the source code, and see why it needs it. Does look a little fishy thou

I'm in the bitcoin minority. I don't know anything about code.

[jamesg]

I would save the crx file and rename that from crx to zip, then look at the source code, and see why it needs it. Does look a little fishy thou

I'm in the bitcoin minority. I don't know anything about code.

Post a link to the extension and I'll take a look.

[BIGMERVE]

https://chrome.google.com/webstore/detail/mt-gox-peek/mplfonagphbambbggaghimbbhpjhapap

Thanks for the help guys.

[gweedo]

Ok I think the permissions I have nothing to do with your actual mt gox account. It probably needs permission cause it is getting the websocket connection from mt gox. Also it is doing cross domain requesting. For the forex thing it looks like it gets the USD price, and then using the Forex price, converts it to different currencies which isn't correct. It should get the correct currency for the bitcoins, otherwise it will be giving a false price since the euro market is small. As of now it looks safe.

[poly]

I looked at the code and there isn't anything fishy there.