161–170 of 270 posts
Earlier quoted context omitted.
What makes uBlock Origin a trustworthy extension ? because it is open-source ?
For me it's honest author. I don't trust code, I trust people.
I wonder if these extensions are so hard to spot because spying is a core feature of Google Chrome, and most top extensions do this. For example, the extraordinarily popular extension Honey phones home about your purchases, shopping habits and other data without adequately disclosing that fact. It's hard to see why Google would care when Chrome was always a trojan horse to co-opt web standards for their own purposes…
Which extensions were compromised? Not seeing a list anywhere.
It would be nice to have it in Chrome https://bugs.chromium.org/p/chromium/issues/detail?id=109643... (star it please)
There is a web intelligence company in Israel that is known to buy popular browser extensions like “Web of Trust” and use them to exfiltrate browsing data (with tons of sensitive and personal information). They have been called out for this several times already and some of their extensions got removed from the store, they invariably turn back up again after a few weeks though (good connections to Google/Mozilla I gu…
Who? - please name names
Companies like SimilarWeb and Alexa (not Israeli) do the thing OP describes.
There is a web intelligence company in Israel that is known to buy popular browser extensions like “Web of Trust” and use them to exfiltrate browsing data (with tons of sensitive and personal information). They have been called out for this several times already and some of their extensions got removed from the store, they invariably turn back up again after a few weeks though (good connections to Google/Mozilla I gu…
The only trustworthy extensions are uBlock Origin and EFF's Privacy Badger. Everything else is best viewed as potential malware, no different than random downloadable executables. Honestly, uBlock Origin and Privacy Badger are so important at this point they should just become part of the browser itself. They're already in a league of their own.
What about Ghostery?
oh, the clickbait it's just shitty chrome extensions gobbling traffic history to resell to ad companies "massive spying" lol... making it sound like cyber-espionage
At this point, I treat Chrome like a Huawei phone: never secure and only to be used at work for those sweet sweet dev tools.
There is a web intelligence company in Israel that is known to buy popular browser extensions like “Web of Trust” and use them to exfiltrate browsing data (with tons of sensitive and personal information). They have been called out for this several times already and some of their extensions got removed from the store, they invariably turn back up again after a few weeks though (good connections to Google/Mozilla I gu…
It's super easy to blame some semi-known Israeli company where in fact it's a way for companies like Google to bypass their own security policy and restrictions.
- Google does not collect all website data
- Google creates an extension model that allows a third-party to collect all analytics data
- Google buys said analytics data and has access to it.
It's done in a somewhat semi-regulated way, but the whole thing is a regulation bypass companies like Google do that will (hopefully) eventually be plugged.
This is similar to the toolbar and installer industry of 5-10 years ago.
Earlier quoted context omitted.
Android was being developed before IOS, and had a prototype phone in 2006. If anything, Windows Mobile was probably what they feared.
Windows Mobile was as good as dead on most markets. If anything, the competition was against Symbian, and to a lesser extent against Blackberry.
There is a web intelligence company in Israel that is known to buy popular browser extensions like “Web of Trust” and use them to exfiltrate browsing data (with tons of sensitive and personal information). They have been called out for this several times already and some of their extensions got removed from the store, they invariably turn back up again after a few weeks though (good connections to Google/Mozilla I gu…
Is there a list of extensions that have been caught exfiltrating data? I look at the 20 I've got installed and wonder which are using the "Access to every website" permission for their own ends.
For example at the extension I help maintain (Testim Editor) we literally do test automation which requires elevated permissions.