My browser, the spy: How extensions slurped up browsing histories from 4 million users (Ars Technica)