Live data from Hacker News

Osprey – Browser extension that protects you from malicious websites

github.com

21–27 of 27 posts

Re: Osprey – Browser extension that protects you from malicious websites

#21

ublock Origin already has a feature called "strict blocking" which does the same thing. In fact, the placeholder page that this extension takes you to looks almost exactly the same as the one that ublock origin uses.

I promise the warning page was made from scratch!

Re: Osprey – Browser extension that protects you from malicious websites

#22

ublock Origin already has a feature called "strict blocking" which does the same thing. In fact, the placeholder page that this extension takes you to looks almost exactly the same as the one that ublock origin uses.

> does the same thing Does that feature really send each URL you attempt to browse to a bunch of third-party services to be verified before it lets you browse them? Edit: Made some not-very-thorough research and it seems like "strict blocking" in uBlock Origin does not do the same thing. It does local lookups against regularly updated filter lists. Like all of uBlock Origin's blocking, I guess.

Osprey is entirely asynchronous. It doesn't hold pages at all. If you visit an unsafe website, you might see it for 50-250ms before the connection is stopped.

Re: Osprey – Browser extension that protects you from malicious websites

#23

Not sure what this provides that a malicious site list for uBlock Origin provides in a better, more privacy preserving way.

uBlock Origin's filters aren't up-to-date. You can go to PhishTank and try all the recently added websites on a VM. uBlock won't block any of them.

Re: Osprey – Browser extension that protects you from malicious websites

#24
post #8
post #4

Earlier quoted context omitted.

On 2, it appears to be open source so you could look and see if/what it logs.

I seems to send all urls you visit to Microsoft, Symantec, Emisoft, Webshield, Norton, Gdata Security, and/or BitDefender, depending on your settings. And of course, those URLs can be changed on the next update.

This is true, and they do. I'm replacing Comodo's Valkyrie API with Symantec's Browser Protection API for performance reasons. But, no data is logged, and only the minimum amount of data is sent to each provider.

Re: Osprey – Browser extension that protects you from malicious websites

#25
post #17
post #3

So this extension is feeding a stream of your browsing activity to a bunch of third party services? No thanks.

The same thing happens with Google's SafeBrowsing, Microsoft's SmartScreen, Bitdefender TrafficLight, or Emsisoft Browser Protection. Osprey essentially combines multiple already existing browser protection extensions into one.

SafeBrowsing uses local database AFAIK.

Re: Osprey – Browser extension that protects you from malicious websites

#26
post #25
post #17

Earlier quoted context omitted.

The same thing happens with Google's SafeBrowsing, Microsoft's SmartScreen, Bitdefender TrafficLight, or Emsisoft Browser Protection. Osprey essentially combines multiple already existing browser protection extensions into one.

SafeBrowsing uses local database AFAIK.

Ah! True. I guess they realized it would be better to do that than have the extra network strain.

Re: Osprey – Browser extension that protects you from malicious websites

#27
post #22

Earlier quoted context omitted.

> does the same thing Does that feature really send each URL you attempt to browse to a bunch of third-party services to be verified before it lets you browse them? Edit: Made some not-very-thorough research and it seems like "strict blocking" in uBlock Origin does not do the same thing. It does local lookups against regularly updated filter lists. Like all of uBlock Origin's blocking, I guess.

Osprey is entirely asynchronous. It doesn't hold pages at all. If you visit an unsafe website, you might see it for 50-250ms before the connection is stopped.

Good to know!
Post reply on HN