Live data from Hacker News

uBlock Origin GPL code being stolen by team behind Honey browser extension

old.reddit.com

371–380 of 469 posts

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#371
post #100

Is he correct? That you can't have GPL files in your project without all code adhering to it? I thought it has to be linked static. So just calling a GPLed js library likely wouldn't be enough. I think the law is muddy here and not clear at all, even if the code is directly bundled.

There are multiple aspects here. In short, any kind of linking or equivalent process definitely makes your code a combined work with the GPL parts; the "safe" way of using the code are more like calling a GPL process like `system("ls -l")`.

First, if you are distributing modified code or code compiled from GPL sources, in any way, you must advertise that fact clearly, and extend an offer to the original sources plus your compilation methods to anyone who recieves this from you. This is true regardless of whether your work constitutes a combined work.

Then, if you are distributing a work that includes GPL parts and parts that you don't want to release under the GPL, you have to check specifically how the GPL parts are used. The relatively safe boundary is calling GPL binaries as separate processes, especially over a network - if this is the only way you are using the GPL code, it's probably OK to keep your other parts under an incompatible license.

If you are using the GPL parts any more closely, such as calling functions from a GPL library directly through an FFI, or worse, linking to that library, then you are almost certainly building a combined work and all of your own code has to be released under the GPL if you wish to distribute the GPL parts.

Even if you are calling the code only as a separate process, the amount and type of communication you use matters - if you are exchanging extremely complex and specific data structures with the GPL process, rather than just a few command line switches and parsing some yes/no answer, then your work may still constitute a combined work and have to be entirely distributed under the GPL.

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#372
post #107

Earlier quoted context omitted.

If I understood MegaLag's video correctly, Honey was indeed overriding an affiliate session cookie with their own once the user the reached the checkout. The extension would silently open a tab in the background, which seems pretty scummy. I've observed the same background tab shenanigans with the Capital One extension as well.

They do this to not interrupt the purchase flow, not to be scummy. Opening a tab in the foreground or refreshing the page is extremely annoying to users and merchants request it to be in the background so it doesn't hurt their conversion. I never said Honey doesn't override cookies. I'm not saying this isn't a problem, it's just not a Honey-specific problem. If the affiliate networks used first-click or multi-click a…

Cookie stuffing to steal affiliate attribution is fraud. People have gone to prison for doing what Honey does: https://www.justice.gov/usao-sdal/pr/cookie-stuffing-interne...

https://www.businessinsider.com/shawn-hogan-sentenced-in-eba...

https://en.wikipedia.org/wiki/Cookie_stuffing

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#373

Earlier quoted context omitted.

I think the "information want to be free" crowd is very consistent. They want the information to be free. They don't want artificial scarcity. Sure they'll use IP as a means to an end, but that doesn't mean they believe IP is a good idea in general. It's just one of few tools that exist to solve it. In an ideal world all software would be forced to be FOSS, and we'd have to come up with ways of funding it that aren't…

What if I hand-code something in asm? What if I tell you I hand-coded something in asm, but secretly used a Rust compiler with an obfuscator?

Not everyone is stupid; people would catch on very quickly.

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#375

Earlier quoted context omitted.

This is hard to grasp. Do I understand correctly that some web pages may display a coupon code for a discount on some possible future sale. And the Honey extension detects this coupon code and replaces it with a different coupon with less discount? This all seems so absurd, making money by skimming hypothetical discounts.

From what I understand, no, they don’t replace coupons you’ve entered. Honey’s advertising message was “never search for a coupon again” and “we’ll ensure you always have the best discount possible”. However in reality a merchant could sign up as a Honey partner and for a mere 3-5% commission they’d let you set the coupons that Honey would show. So for example if your business gave a 20% promotional coupon to a small…

thanks for the explanation.

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#376

Snopes looking real silly for this 2018 fact check: https://www.snopes.com/fact-check/honey-browser-extension/

Snopes in 2018 and Snopes in 2008 were sadly two very different things. They used to be such a great resource!

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#377
post #376

Snopes looking real silly for this 2018 fact check: https://www.snopes.com/fact-check/honey-browser-extension/

Snopes in 2018 and Snopes in 2008 were sadly two very different things. They used to be such a great resource!

They were always a protection racket against retailers, and I haven't seen any proof that they started stuffing their affiliate code in 100% of the time only recently.

The racket is that they f*k with your campaigns by stealing codes typed by users of the extension, so even users who don't think they're sharing them end up sharing them with Honey. Imagine the fun when someone creates a valuable code for someone trusted and doesn't limit its usage sufficiently, and someone uses it on a Honey-infected machine. Now the whole Internet is getting a possibly loss-making discount!

Honey then contacts the business and says "Gee, wouldn't you like us to stop doing that? Just pay us 3% on every sale any of our tens of millions of users buy and we'll let you blacklist any codes you like!"

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#378
post #185

Earlier quoted context omitted.

I would be careful handing out legal advice as a non-legal expert, especially when it is about "bypassing legal issues". You might be doing someone a big disservice. @readers: Obligatory notice: Don't base your business decision on random internet comments.

This is excessive. Any fool taking legal advice from pseudonymous internet comments is getting what they paid for.

Ok. Got it. Next time, I'll leave probably false legal advice unchallenged.

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#379
post #353

Earlier quoted context omitted.

Here is an article from January 2020 https://www.bloomberg.com/news/articles/2020-01-10/amazon-te... --- PayPal Holdings Inc. made a big bet in November with its $4 billion acquisition of Honey, a web browser extension that helps online shoppers find the lowest prices. Now Amazon.com Inc. is warning customers not to use the tool. Shortly before Christmas, Amazon said Honey posed a security risk, which was reported Th…

Yeah, that tiny blurb was all I could find, which doesn't really tell me anything. > The evidence presented is Amazon dot com affiliates walk on eggshells to avoid breaking Toss that Honey completely tramples on so at the very least honey is not subject to the same tos as everybody. However, Amazon dot com is very aware of honey evidenced by advisory warnings on Amazon dot com website from a few years ago. I don't ge…

It could also mean Amazon dot com has decided that it was not possible to kill honey and it was better to join them rather than trying to and failing to kill honey.

I think it is already proven that honey does not automatically show the best coupons for its users. So how and when does honey decide to hold back? The conspiracy theory is honey decides to hold back when there is an agreement with the vendor. Now logically, why would honey intentionally give its users a poorer experience? It makes sense to me that honey will only do so intentionally if honey is getting paid to do so.

Re: uBlock Origin GPL code being stolen by team behind Honey browser extension

#380
post #281

Earlier quoted context omitted.

Legal Eagle is suing: https://youtu.be/4H4sScCB1cY?si=bXxfG_EekkzGEW7J

Between this and that botched FOIA request, it feels real good to have content creators out there actually looking out and fighting against this BS that every other content creator lacks the expertise to do anything about. I don't care if they do two ads per video (a normal ad and one for their firm), they more than deserve to shout themselves out.

>content creators out there actually looking out and fighting against this BS

Maybe they should have looked out before taking advertisement deals for products they don't even try to understand.

The only reason all of the "content creator" (influencer would be more fitting) care about this, is for once the product screw over them instead of there audience (just look at betterhelp).

Post reply on HN