Any alternatives for Mac users?
“Stylish” browser extension steals all your internet history
91–100 of 161 posts
Re: “Stylish” browser extension steals all your internet history
#92Earlier quoted context omitted.
On the other side of the coin, Firefox makes it quite hard to push updates to users that require more permissions, requiring manual intervention to update. It signifies this with a small muted yellow exclamation mark on the hamburger menu, which is really hard to see. I've not received my own updates for weeks a few times because I haven't noticed the warning, and about a third of our users are on ancient versions pr…
Firefox is in the right here. I absolutely do not ever want extensions to automatically get new permissions automatically just because I accepted an old version's lesser permissions. If you want more permissions, then ask for more permissions. And don't be surprised when people say NO. Not everyone wants to grant the permissions to your update even if the update fixes bugs in older versions. Not everyone will want yo…
Re: “Stylish” browser extension steals all your internet history
#93Re: “Stylish” browser extension steals all your internet history
#94This is a huge problem for the extension ecosystem in general. Who originally publishes an extension may not be the same entity that is pushing you updates in two years time, and there's no way as a user to know this. I publish a few extensions [1] [2] [3] and have been contacted multiple times by companies asking to buy them for several thousand dollars. They told me the going rate was 0.20 USD per user. You can ima…
On the other side of the coin, Firefox makes it quite hard to push updates to users that require more permissions, requiring manual intervention to update. It signifies this with a small muted yellow exclamation mark on the hamburger menu, which is really hard to see. I've not received my own updates for weeks a few times because I haven't noticed the warning, and about a third of our users are on ancient versions pr…
If url, div, cookies and any other info are collected, what are they?
What server connections are made by the extension, IP, Name, contents of info transmitted?
All the GUI, collection system should be in place as part of JS dev/debug tools already. Just customized it a bit so any tech savvy users can check the audit logs and enable more logging for a plugin if needed.
If an user spots something not right, it is also easy to out the "plugin/extension" on a public forum.
Re: “Stylish” browser extension steals all your internet history
#95Earlier quoted context omitted.
On the other side of the coin, Firefox makes it quite hard to push updates to users that require more permissions, requiring manual intervention to update. It signifies this with a small muted yellow exclamation mark on the hamburger menu, which is really hard to see. I've not received my own updates for weeks a few times because I haven't noticed the warning, and about a third of our users are on ancient versions pr…
Firefox is in the right here. I absolutely do not ever want extensions to automatically get new permissions automatically just because I accepted an old version's lesser permissions. If you want more permissions, then ask for more permissions. And don't be surprised when people say NO. Not everyone wants to grant the permissions to your update even if the update fixes bugs in older versions. Not everyone will want yo…
I agree with you. As another reply to you states, however, Firefox doesn't currently let me ask. You have to kind of go hunting for it.
> And if you're not adding a new feature, then why do you need more permissions?
Firefox does not let me explain why the permissions are needed. It would be nice if we could have a little blurb where we can state our case next to each permission.
Our current approach is to explain likely upcoming permissions requests in advance and ask our users to stay vigilant for the appearance of the tiny yellow exclamation mark, but that's not very helpful to the third of users stuck on old verions before we learnt that trick.
> And don't be surprised when people say NO.
I think very few of these users have said no on purpose. We ask for (and use) almost everything [1], so any marginal new permissions are unlikely to give us much more power. The current permission model actually makes it tempting to just literally ask for everything because we might want it for a new feature in the future.
The optional permissions are not fine-grained enough to be useful (you can accept all optional permissions, or none) and not available for enough permissions, otherwise we would use them.
Also, the first versions of our software were really slow and bad. I really doubt many people are staying there on purpose. (If there are any Tridactyl users in this thread using an old version on purpose, I'd like to hear from you :) ).
[1] https://github.com/cmcaine/tridactyl/blob/e20a224fb8d8bbb2b7...
Re: “Stylish” browser extension steals all your internet history
#96This is a huge problem for the extension ecosystem in general. Who originally publishes an extension may not be the same entity that is pushing you updates in two years time, and there's no way as a user to know this. I publish a few extensions [1] [2] [3] and have been contacted multiple times by companies asking to buy them for several thousand dollars. They told me the going rate was 0.20 USD per user. You can ima…
I realize this is bad, but what happens to the user data exactly? I mean can someone here paint the bleakest, most dystopian possible use or future?
In my experience anonymization is hit or miss, but ostensibly always in place.
Re: “Stylish” browser extension steals all your internet history
#97I've gotten annoyed enough to just copy the source from most of my extensions (located at `~/.config/google-chrome/Default/Extensions/`), remove the update stuff from the `metadata.json` and load them as developer extensions so they never update. It's easy enough to update them + audit the code when something breaks. The hardest part is downloading the new code (.crx) without installing it, I had to write javascript…
I'm curious though - What about it is better than turning off automatic updates for addons?
Re: “Stylish” browser extension steals all your internet history
#98Earlier quoted context omitted.
GDPR applies for all users located in the EU, not only to companies headquartered in the EU, so Brexit is not that much of a concern here. Also, the transition period will bind the UK to most EU laws for a few more years.
It is already in U.K. law, in any event: * http://legislation.gov.uk/ukpga/2018/12/contents/enacted/dat...
The GDPR is UK law automatically because it is a Regulation, not a Directive (which needs to be transposed into national law).
The Data Protection Act 2018 implements the Law Enforcement Directive (as the GDPR excludes that from its scope) and a couple of minor derogations (such as changing the age of consent for children to use websites by themselves to 14).
Re: “Stylish” browser extension steals all your internet history
#99This is a huge problem for the extension ecosystem in general. Who originally publishes an extension may not be the same entity that is pushing you updates in two years time, and there's no way as a user to know this. I publish a few extensions [1] [2] [3] and have been contacted multiple times by companies asking to buy them for several thousand dollars. They told me the going rate was 0.20 USD per user. You can ima…
[1] https://willrobbins.org/a-clever-malware-tactic-and-why-ther...
Re: “Stylish” browser extension steals all your internet history
#100Always the same cycle. 1/ New great product is built. People love it. 2/ Once enough people use it, start monetizing in shady ways, annoying users just not too much or they leave. 3/ Very annoyed users switch to another product back to 1/
shouldn't have needed it in the first place. what happened to pointing to a css file.