[flagged]
8M users' AI conversations sold for profit by "privacy" extensions
141–150 of 261 posts
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#142Am I just paranoid or open router is the next bomb ticking to a privacy explosion? What is their business model anyway?
Note that in the profile of a model in Openrouter, under Data Policy, there is a statement as "Prompt Training". Some of model will clearly stated that prompt training is true, even for paid models.
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#143I stick to extensions that Mozilla has manually vetted as part of the Firefox recommended extensions program. > Firefox is committed to helping protect you against third-party software that may inadvertently compromise your data – or worse – breach your privacy with malicious intent. Before an extension receives Recommended status, it undergoes rigorous technical review by staff security experts. https://support.mozi…
The same applies to code editor extensions!
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#144Nice write up. It would be great if the authors could follow up with a detailed technical walk through of how to use the various tooling to figure out what an extension is really doing.
Could one just feed the extension and a good prompt to claude to do this? Seems like automation CAN sniff this kind of stuff out pretty easily.
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#145How did I know this was an israeli company just by how unethical they are at scale?
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#146I don't understand why so many people are using / trusting VPNs "Let us handle all your internet traffic.. you can trust us.. we're free!" No thank you.
For the same reason you trust your ISP? It handles all your internet traffic; and depending on where you live, probably has government-mandated back doors, or is willing to cooperate with arbitrary requests from law-enforcement agencies. That's why TLS exists, after all. All Internet traffic is wiretapped.
> I don't understand why so many people are using [Cloudflare].
> "Let us handle all your internet traffic.. you can trust us.. []"
TLS does not help, when most Internet traffic is passed through a single entity, which by default will use an edge TLS certificate and re-encrypt all data passing through, so will have decrypted plain text visibility to all data transmitted.
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#147How did I know this was an israeli company just by how unethical they are at scale?
And what are the odds that mossad are getting access to this data?
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#148[deleted]
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#149If you want a VPN you can trust, deploy your own with AlgoVPN: https://github.com/trailofbits/algo
I prefer WG-Easy (https://github.com/wg-easy/wg-easy), which uses a Docker container, not ansible.
Re: 8M users' AI conversations sold for profit by "privacy" extensions
#150I stick to extensions that Mozilla has manually vetted as part of the Firefox recommended extensions program. > Firefox is committed to helping protect you against third-party software that may inadvertently compromise your data – or worse – breach your privacy with malicious intent. Before an extension receives Recommended status, it undergoes rigorous technical review by staff security experts. https://support.mozi…
The question is, does Mozilla rigorously review every single update of every featured extension? Or did they just vet it once, and a malicious developer may now introduce data collection or similar "features" though a minor update of the extension and keep enjoying the "recommended" badge by Mozilla?
This may also be the reason for the extension begin "Featured" on the Chrome Web Store: Google vetted it once, and didn't think about it for each update.