Classic!
"There is no such thing as bad publicity" by Ionut Botizan
(Source: http://productforums.google.com/d/msg/chrome/mlAD1ygc0v0/1MP...)
The "Window Resizer" extension for Chrome now contains malware (2013)
71–80 of 124 posts
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#72This is completely egregious. Deleting now.
I love that the developer's defense is that he could have sold our passwords to someone but (supposedly) didn't. That really instills confidence in his morals, doesn't it?
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#73Here’s how you disable “EcoLinks” if you have this extension installed and enabled: chrome-extension://kkelicaakdanhinjdeammmilcgefonfh/ecosia.html Uncheck “Enable EcoLinks”.
Yeah, and then it re-enables itself hours later, according to countless commenters.
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#74Earlier quoted context omitted.
Seems as though he's aware of such a thing. "No, that's bundled adware. If I wanted to give you malware, I would have added a keylogger which you wouldn't have ever discovered (ask around; it's technically possible). So stop whining already, uninstall the extension and move on with your life!" http://productforums.google.com/d/msg/chrome/mlAD1ygc0v0/FL6... (Also, he's now posting on the linked thread. 7 minutes ago l…
> I would have added a keylogger seems to imply that he was not logging keystrokes, which conflicts directly with the first post in that thread: > they are tracking all data and keystrokes. checked with wireshark. It'd be nice to have a copy so that we can find out for ourselves.
[deleted]
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#75Shame, because it's a good resizer. I happened to uninstall it back in November, but my co-worker is still (was) using it.
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#76When developing my first Chrome Extension, it didn't take me long until i got the thought of "keylogging might be possible". So i tried it, and sure - i was even able to replace password logins in the DOM with fake ones. Firefox extensions does the same thing really, so now i only use a few "safe" extensions. I'm surprised that this hasen't gotten more attention.
At least Firefox extensions on Mozilla's add-ons site gets more thoroughly reviewed on every update.
The add-ons installed from outside of the add-ons site can be very dangerous, but Mozilla tries to block these too: List of blocked add-ons with reasons: https://addons.mozilla.org/en-US/firefox/blocked/
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#77This is completely egregious. Deleting now. I love that the developer's defense is that he could have sold our passwords to someone but (supposedly) didn't. That really instills confidence in his morals, doesn't it?
It's almost akin to "I stabbed you in the leg, but see, I could've stabbed you in the heart!".
Would avoid this developer 100% from now on, Chrome or otherwise.
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#78Hover Zoom had a similar problem recently, but still exists on the Chrome store. Up until a certain version, their data collection did nothing much (perhaps save non-existing domain hits).
Then they partnered with someone and started sending certain form data (!!) to a third party -- claiming they wanted to collect anonymous demographic information. It didn't help that the script injection on all pages (which I discovered when debugging with the web tools) used some shady domains with no web presence.
They claim they did not send e.g. any password data -- but they perfectly could have. I tried reporting the extension on the store as did many others, but that had no effect. The developer seems to have reverted that bit of the code -- for now.
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#79Do we know where he was sending the keystrokes?
Was it logging all keystrokes in Chrome ever?
Re: The "Window Resizer" extension for Chrome now contains malware (2013)
#80Someone should (and I just might) write an extension that updates a list of evil extensions and authors and warns the user when they have a bad extension or try to install a new extension on that list. Powered by a blocklist type of listing and community moderated.