Live data from Hacker News

Show HN: Firefox extension to obfuscate web page text

addons.mozilla.org

51–60 of 91 posts

Re: Show HN: Firefox extension to obfuscate web page text

#54
post #36
post #2

No chrome?

This is maybe a bit unrelated, but it's really pretty heartwarming to see things, however small, that are Firefox-only or Firefox-first. Sure, yes, Chrome is the wildly more popular browser (and Webkit-derived browsers are essentially everything that isn't FF), but a thousand tiny cuts like this are how we break out of the browser monoculture. Having everything be Chrome-first (and, often, Chrome-only) is how we got…

It's sad that firefox reoriented their entire company to eliminate this, their primary advantage.

Re: Show HN: Firefox extension to obfuscate web page text

#55
The add-on page says: "This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing."

As things stand today, gaining my trust would require some work on my side (and I'm a professional of IT Security). For the majority of Internet users (who are not expected to understand what 'package-lock.json' file does), this would take a leap of faith instead.

Is there any service out there that could scan an add-on and highlight any known vulnerabilities (like OWASP Dependency Checker)? Could the add-on service on Mozilla side automatically run such kind of scan and add red flags next to the current warning, if vulnerabilities are already identified on the add-on or any of its dependencies?

Re: Show HN: Firefox extension to obfuscate web page text

#57
post #55

The add-on page says: "This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing." As things stand today, gaining my trust would require some work on my side (and I'm a professional of IT Security). For the majority of Internet users (who are not expected to understand what 'package-lock.json' file does), this would take a leap of faith instead. Is there any service out t…

I think that warnings refers not just to vulnerabilities in dependencies, but also in potentially malicious code in the add-on itself, which is harder to catch with an automated scan.

(Note: this is my interpretation as an add-on developer, not as a Mozilla employee - I'm not involved in addons.mozilla.org.)

Re: Show HN: Firefox extension to obfuscate web page text

#59

Another option for this is to use a “redacted” font like https://github.com/christiannaths/redacted-font I can't find it ATM, but I used to have a bookmarklet that added one of these as a css style on all elements (or removed its edits when run a second time, to revert the page). Shouldn't be too hard to write if I decide I want it again and still can't find the source of the one used back then. It didn't watch for a…

I have quite similar bookrmarklet that actually walks whole DOM and scrambles text nodes and attributes: [1] ([2] for convenient installation)

I've picked 'medium shade (U+2592)' character [3] as visual counterpart, because if felt it has similar "weight" as average glyph. It does not store original values so the only only way to revert it back is to reload page.

[1] https://gist.github.com/myfonj/3bdb6bbacd3b080938716495d8989... [2] https://myfonj.github.io/utils/bookmarklets/dummyze-scramble... [3] https://graphemica.com/%E2%96%92

Post reply on HN