Live data from Hacker News

8M users' AI conversations sold for profit by "privacy" extensions

koi.ai

71–80 of 261 posts

Re: 8M users' AI conversations sold for profit by "privacy" extensions

#71

Earlier quoted context omitted.

I believe you may be missing the sarcasm of the post you are responding to.

I’m here to inform you that you perhaps missed the second-order sarcasm of the post you responded to. Hopefully the chain ends here.

I am afraid you may have missed a third order of sarcasm. It sometimes called Incepticasm.

Re: 8M users' AI conversations sold for profit by "privacy" extensions

#75
post #66

Earlier quoted context omitted.

Yeah free VPN is totally a problem, but there's TLS so at least those users aren't getting their bank account information stolen.

Does tls means certificate pinning ? Can't a vpn alter dns queries to return a proxy website to your bank, using a forged certificate ?

Only if you've added a signing certificate the VPN controls to your CA chain. But at that point they don't have to do anything as complicated as you described.

Re: 8M users' AI conversations sold for profit by "privacy" extensions

#76
post #24

What is the economic value of all these AI chat logs? I can see it useful for developing advertising profile. But I wonder if it's also just sold as training data for people try to build their own models?

Pretty easy to match up those logs with browser fingerprinting to identify the actual user. Then you have "do you want to purchase what Mr. Foo Bar is prompting the LLM?"

Re: 8M users' AI conversations sold for profit by "privacy" extensions

#77

Google needs to act on removing these extensions/doing more thorough code reviews. Reputability is everything, and they can be actually valuable (e.g. LastPass, my own extension Ward) There has to be a better system. Maybe a public extension safety directory?

Is this even a problem that code review could find? Once they have your conversation data what happens then isn't part of the plug-in.

Re: 8M users' AI conversations sold for profit by "privacy" extensions

#78
post #47

I don't understand why so many people are using / trusting VPNs "Let us handle all your internet traffic.. you can trust us.. we're free!" No thank you.

Yeah free VPN is totally a problem, but there's TLS so at least those users aren't getting their bank account information stolen.

[deleted]

Re: 8M users' AI conversations sold for profit by "privacy" extensions

#79

Oh, a free of cost vpn extension that requires access to all sites and data is somehow spyware, color me surprised. With those extensions the user's data and internet are the product, most if not all are also selling residential IP access for scrapers, bots, etc. Good thing Google is protecting users by taking down such harmful extensions as ublock origin instead.

ublock requires access to all sites and data. Maybe they are trustworthy but who really knows?

I mean, I don't trust ublock, for what it's worth. I just disable javascript by default with has pretty much the same effect.

Re: 8M users' AI conversations sold for profit by "privacy" extensions

#80

I stick to extensions that Mozilla has manually vetted as part of the Firefox recommended extensions program. > Firefox is committed to helping protect you against third-party software that may inadvertently compromise your data – or worse – breach your privacy with malicious intent. Before an extension receives Recommended status, it undergoes rigorous technical review by staff security experts. https://support.mozi…

> I know that Google hates to pay human beings, but this is an area that needs human eyes on code, not automated scans.

I think we need both human review and for somebody to create an antivirus engine for code that's on par with the heuristics of good AV programs.

You could probably do even better than that since you could actually execute the code, whole or piecewise, with debugging, tracing, coverage testing, fuzzing and so on.

Post reply on HN