Dont google and mozilla review source code of addons?
“Stylish” browser extension steals all your internet history
21–30 of 161 posts
Re: “Stylish” browser extension steals all your internet history
#22Dont google and mozilla review source code of addons?
Mozilla yes - there's a delay when publishing whilst an actual human reviews the changes. For Google, updates are instantly published with, as far as I can tell, no kind of audit.
Re: “Stylish” browser extension steals all your internet history
#23You can use my Chrome extension "Styler" for as an alternative:
https://chrome.google.com/webstore/detail/styler-classic/hbh...
Addon for Firefox:
https://addons.mozilla.org/en-US/firefox/addon/sudo-styler/
I'm getting all money on development/support from Patreon.
Re: “Stylish” browser extension steals all your internet history
#24This reminds of the "WOT, Web of Trust" (haha) privacy issue in 2016: Reporters (disguising as business men) were offered data that includes the surfing habits of three million German citizens. This data was, at least partly, collected by the “Web of trust” (WOT) browser extensions. The reporters were able to use this data to identify the browsing habits of individual persons – including high-ranking German and EU po…
Indeed. I never trusted it. I never trust any feature or add-on that uploads anything. That includes malicious site detectors. I only use stuff that relies on local databases.
Re: “Stylish” browser extension steals all your internet history
#25Most browser extensions seem to require access to one's browsing history and keystrokes, even for legitimate functioning. Is there any way to ensure that they do only what they claim to do, and don't abuse the permissions? (Apart from verifying the source code, because clearly, lines of junk code >> interested eyeballs). For example, would it be reasonable to enforce that an extension only acts locally, and cannot co…
Yes, it's very hard to block that, since even if you block XHR from their JavaScript code, by changing the page DOM they can inject elements that communicate with a server.
Re: “Stylish” browser extension steals all your internet history
#26Always the same cycle. 1/ New great product is built. People love it. 2/ Once enough people use it, start monetizing in shady ways, annoying users just not too much or they leave. 3/ Very annoyed users switch to another product back to 1/
Small correction:
1/ New great _free_ product is built. People love it.
Image and file hosting services and messengers are the best examples.
I swear it's because the well has been poisoned and it's just impossible to monetize these services in a moral way.
Re: “Stylish” browser extension steals all your internet history
#27Offices in the UK. I would encourage anyone in the EU who used this to file a GDPR complaint.
look here to find out where you can file the complaint in your local country:
https://ec.europa.eu/commission/sites/beta-political/files/n...
Re: “Stylish” browser extension steals all your internet history
#28As others have said, immediately switch to Stylus. While we're at it stop using Ghostery as well since they were bought by an ad company. Use Privacy Badger or a decent alternative (noscript + heavy/custom uBlock lists should work just fine)
uBlock Origin can also make style changes to webpages with :style(), it might be good enough for you if you don’t need too many changes.
Re: “Stylish” browser extension steals all your internet history
#29This is a huge problem for the extension ecosystem in general. Who originally publishes an extension may not be the same entity that is pushing you updates in two years time, and there's no way as a user to know this. I publish a few extensions [1] [2] [3] and have been contacted multiple times by companies asking to buy them for several thousand dollars. They told me the going rate was 0.20 USD per user. You can ima…
I realize this is bad, but what happens to the user data exactly? I mean can someone here paint the bleakest, most dystopian possible use or future?
Re: “Stylish” browser extension steals all your internet history
#30Offices in the UK. I would encourage anyone in the EU who used this to file a GDPR complaint.
Quickly though.
GDPR applies for all users located in the EU, not only to companies headquartered in the EU, so Brexit is not that much of a concern here.
Also, the transition period will bind the UK to most EU laws for a few more years.