Recent researchers from University of Wisconsin - Madison provided an experiment to show how user's identity can be stolen via browser's extensions.