Chess.com BestMove

ID: imfjmkjphmkjfjmjommbclfhbdacljba

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
2.62
Size
0.79 MB
Rating
5.0/5
Reviews
3
Users
453
Type
Extension
Updated
Apr 1, 2024
Category
Lifestyle Fun
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
chess.extensionView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
453

A stockfish based chess solver for chess.com. Automatically highlight best moves.

This chrome extension automatically highlights optimal chess moves in real-time during your chess.com matches, helping you to improve your game and make smarter decisions on the board. With this extension, you'll be able to take your chess skills to the next level and dominate your opponents. Try it out for free! Pin it to your tool bar to quickly toggle the engine, view the evaluation*, and see statistics on top opening book moves in real time. You can hit the 'e' key to conveniently toggle the engine and reveal the top move. Go to the options page to change the highlight color or search depth (right click the icon -> Option). The engine will continuously solve when it is your turn to move. It will quickly display a good move in ~1 second, but may change moves as the solve progresses and depth increases. If desired, the max search depth can be adjusted in the options. Normally, chrome will close extension pop-ups when you click away. If you want to keep it open all match so you can keep an eye on the information, there is a trick: right click in the popup and click 'inspect'. It will remain open. If you experience any buggy behavior, try refreshing the page! DISCLAIMER: Chess.com WILL ban your account if you use this tool excessively, and potentially your ip address after a second offense. They have sophisticated detection and know when you are making too many super human moves! I recommend using it sparingly in tough spots as a learning tool ;) KNOWN BUGS: - There are issues with pre-moving. If the move suggestion does not appear after a pre-move, re-toggle the switch to prompt the engine to re-solve. - You cannot have more than one chess.com tab open at a time. If it detects more than one chess board, it will fail to display the move properly. - You must not have the piece "Animation" setting set to "Arcade" - Occasionally, stockfish raises out of memory errors and the extension completely breaks, even if you refresh the page. Fully closing and re-opening the browser will be needed in this case unfortunately. I'm working on fixing this -- let me know if you can consistently reproduce this issue. If you have any questions, feature requests, or other bug reports feel free to email me. I am actively working to improve this extension. Hover over opening book moves to highlight them on the board. This extension currently uses stockfish 11, same as chess.com. I'm investigating stockfish 15 -- if you're interested in this, feel free to email me. *evaluation: https://support.chess.com/article/656-what-do-the-computer-evaluation-numbers-mean-like-225

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
URLs
80
IPv4
5
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

github.com/nmrugg/stockfish.jshttp://github.com/nmrugg/stockfish.js
ewsnroqvf4.execute-api.us-east-1.amazonaws.com/default/chessBestMoveDoesEmailExisthttps://ewsnroqvf4.execute-api.us-east-1.amazonaws.com/default/chessBestMoveDoesEmailExist?email=${encodeURIComponent(email
ewsnroqvf4.execute-api.us-east-1.amazonaws.com/default/chessBestMoveAddEmailhttps://ewsnroqvf4.execute-api.us-east-1.amazonaws.com/default/chessBestMoveAddEmail?email=${encodeURIComponent(email
github.com/jhlywa/chess.js/issues/230https://github.com/jhlywa/chess.js/issues/230
www.chessclub.com/help/PGN-spechttp://www.chessclub.com/help/PGN-spec
explorer.lichess.ovh/mastershttps://explorer.lichess.ovh/masters?fen=${encodeURIComponent(fen
developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessagehttps://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
github.com/mozilla/webextension-polyfill/issues/130https://github.com/mozilla/webextension-polyfill/issues/130
extensionpay.com-https://extensionpay.com
extensionpay.com`;-https://extensionpay.com`;
Showing 1 to 10 of 80 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

0.0.0.0
IPv4
-
0.0.0.1
IPv4
-
2.3.3.3
IPv4
-
2.3.3.1
IPv4
-
127.0.0.1
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
2.62
Latest
0.79 MB
Malicious
—
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.