15 years in Cybersecurity | Expertise in API & Platform Security. Building resilient systems and fostering diverse team

github

dribbble

gumroad

hashnode

medium

productHunt

substack

projects

youtube

codeforces

adplist

Ishan Girdhar  • Peerlist

Designer (UI & UX) | Product |  Certified PMP, PO

<h3>Indie Kalakar is a platform built for the Indian diaspora—a global community deeply connected to the arts, culture, and heritage of India.</h3>As NRIs, many of us share the longing to reconnect with the music, dance, and traditions that shaped our identity. Living abroad, finding the right teachers or classes can often feel like searching for a piece of home that’s just out of reach.Indie Kalakar was born to solve this challenge. It’s a space where Indian cultural artists and teachers—from Singapore to the UAE, the USA, and beyond—can showcase their talent. It’s also a place where enthusiasts can discover, connect, and engage with this artists and teachers effortlessly, bridging the gap between heritage and community.<h3>At Indie Kalakar, we make it easy to:</h3><ol><li>Discover Indian cultural artists and teachers in your country and even save your favorite profiles for future inspiration.</li><li>Get featured on the platform—whether you’re a dancer, musician, visual artist, or yoga/Ayurveda teacher, simply add your listing to showcase your craft.</li><li>Connect with like-minded collaborators, receive direct inquiries, and create meaningful connections that nurture your passion and craft.</li></ol>'Saraswati Namastubhyam Varade Kamarupini, Vidyarambham Karishyami Siddhir Bhavatu Me Sada' (O Saraswati, the giver of boons and embodiment of knowledge, I begin my pursuit of learning—may I always be successful).Inspired by the spirit of Saraswati—the goddess of wisdom, art, and music, we honor the timeless flow of knowledge and creativity without boundaries, making it easier for the knowledge to flow wherever life takes us.

Indiekalakr

Cyber Security & AI @ Google | Neurodivergent | Coach & Mentor

🌟 After watching MegaLag's Video about the PayPal Honey browser extension, I had a wake-up call.And as it turns out, this is exactly the motivation I needed to create something that solves this and empowers everyday users to take back control of their data privacy.💡 It was eye-opening—and infuriating.As someone who cares about 🛡️ user privacy and security, I couldn’t ignore the risks that browser extensions like Honey can pose.🚀 So, I built... Introducing: Extension AuditorExtension Auditor is a browser extension that helps users understand and evaluate the security implications of their installed browser extensions. It provides real-time security analysis and risk assessment of extensions based on their permissions, capabilities, and potential security impacts.🔑 Features🔍 Real-time Security Analysis: Instantly analyzes installed extensions for security considerations.⚠️ Risk Classification: Categorizes findings into Critical, High, Medium, and Low severity levels.🛡️ Permission Analysis: Detailed explanation of each extension’s permissions and their security implications.🌐 Host Access Analysis: Identifies extensions with broad host permissions or access to sensitive domains.📊 Comprehensive Report: Generates detailed security reports with specific findings and potential risks.🕵️ Privacy Focus: Runs locally in your browser with minimal required permissions.👥 Who can benefit🌐 Everyday Internet Users: Stay informed and secure.🎥 Content Creators: Vet extensions before promoting them to your audience.🔒 Cybersecurity Professionals: A great starting point for pentesting browser extensions to guide deeper dynamic and runtime analysis.🔍 Privacy Professionals: Discern privacy concerns of using an extension and compare advertised privacy practices vs. actual use.🛠️ How it worksExtension Auditor analyzes extensions based on several factors:🔑 Permission Analysis: Evaluates the permissions requested by extensions and their potential security implications.🌐 Host Access: Identifies broad host permissions that could pose privacy risks.💻 Content Script Analysis: Examines how extensions interact with web pages.📜 Manifest Analysis: Reviews extension manifest settings for security best practices.📈 Combined Risk Assessment: Calculates overall risk based on multiple security factors.🔒 Risk Rating Methodology🚨 Critical: Highly sensitive permissions or combinations that could be dangerous if misused.⚠️ High: Permissions that could potentially be used maliciously.⚡ Medium: Permissions that require caution as they provide significant capabilities.✅ Low: Permissions with limited potential for misuse.🛡️ PrivacyExtension Auditor requires only two permissions:management: To access information about installed extensions.tabs: To display the analysis interface.💡 The extension runs entirely in your browser and:❌ Does not collect any personal data.❌ Does not send data to external servers.❌ Does not modify any other extensions.❌ Does not modify webpage content.🔑 Permissions ExplainedA permission is either one of a list of known strings, such as activeTab, or a match pattern giving access to one or more hosts. Remove any permission that is not needed to fulfill the single purpose of your extension.⚙️ The management permission is essential for this extension because it allows us to:📋 List and access information about installed extensions using <a target="_blank" rel="noopener noreferrer nofollow" class="text-green-500 rich-link break-all link-break" href="http://chrome.management">chrome.management</a>.getAll().📖 Get detailed extension information using <a target="_blank" rel="noopener noreferrer nofollow" class="text-green-500 rich-link break-all link-break" href="http://chrome.management">chrome.management</a>.get(extensionId).🔄 Monitor extension lifecycle events through listeners.We use this permission to:📜 Get manifest details.🔑 Check permissions.📂 Monitor content scripts.🛡️ Analyze security settings.🔄 Track extension states (enabled/disabled).🌐 Get host permissions.⚙️ Access CSP (Content Security Policy) settings.Without the management permission, it would be impossible to perform security analysis—making this the core permission that enables the extension’s main functionality.🌍 Let’s make browsing safer—for all of us. 🌟