this post was submitted on 28 Jul 2024
-20 points (29.2% liked)

Privacy

31882 readers
644 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
-20
Unknown addon. Any details ? (addons.mozilla.org)
submitted 3 months ago* (last edited 3 months ago) by Alb087@lemmy.ml to c/privacy@lemmy.ml
 

A unknown addon in firefox addon store with 4.5+ rating.

(From, most of the comments it's seems like this addon is suspicious and don't have enough proof or evidence to trust it with our data. So please everyone avoid using this addon. A better one is "UBLOCK ORIGIN").

all 32 comments
sorted by: hot top controversial new old
[–] anamethatisnt@lemmy.world 47 points 3 months ago (1 children)

They will use popups asking you to upgrade to a premium version:
https://adblockultimate.net/pricing

Which is kinda silly when they seem to mostly copy the work of others:
https://github.com/mozilla/addons/issues/1078

I second the uBlock Origin recommendation.

[–] otter@lemmy.ca 12 points 3 months ago

Well that's shady

[–] lucasmz@hachyderm.io 40 points 3 months ago (2 children)

@Alb087 why not use something more... trusted and probably better? ublock origin is the best around.

[–] lucasmz@hachyderm.io 11 points 3 months ago (1 children)

@Alb087 this mascot is giving me the creeps.

[–] tfowinder@lemmy.ml 21 points 3 months ago (1 children)

Why not use uBlock? Widely used and gets job done

[–] tavu@sopuli.xyz 17 points 3 months ago (2 children)

If you're using Mozilla's level of endorsement as a metric, note this prominent disclaimer on the addon's page:

⚠️ This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing.

[–] tavu@sopuli.xyz 21 points 3 months ago

ublock origin does not have this disclaimer. It works well and is widely trusted.

[–] tfowinder@lemmy.ml 12 points 3 months ago (1 children)

Check the licence.

If it's not any open source licence then fundamentally not trustable.

[–] umami_wasbi@lemmy.ml 3 points 3 months ago* (last edited 3 months ago) (1 children)

I'm not going to tell you what to use instead, but how you make the judgement for yourself: audit the code yourself

The source code is linked right there, and you don't need trusting someone to make the call. You're making the call. Mind you, the actual add-on installed from Mozilla Add-Ons might contains different code then what shown in the repo. I never release any add-ons so that is just a wild guess and a hint possibility this could happen.

To give you an head start: look for URLs and any encoded strings in all files, be it Base64 or something else. And follow them to find out why there it is there, how is it triggered, etc. Same goes for encoded strings with the added question: what was encoded within.

Still, that is just the basic, and I'm not too into JavaScript but there could be other ways of hiding information, like in an image file via steganography.

[–] lucasmz@hachyderm.io 14 points 3 months ago (1 children)

@umami_wasbi @Alb087 auditing code is complicated, not everyone will know how to do that, and even the people who do can miss a lot

[–] umami_wasbi@lemmy.ml -1 points 3 months ago* (last edited 3 months ago) (1 children)

Yes, but we are not auditing security or cryptography implementation.

Instead, the goal is get a sense how it works, and look for suspicious codes or have if parts hidden (encoded) and doesn't want people to know. That's relatively way easier than a serious audit.

[–] fluckx@lemmy.world 10 points 3 months ago (1 children)

I think you greatly overestimate the average person's ability to understand even the most basic code. Let alone in multiple languages.

[–] umami_wasbi@lemmy.ml 2 points 3 months ago

Really? Maybe I got too used to it.

[–] TheBigBrother@lemmy.world 0 points 3 months ago (1 children)

Why not DNS level AdBlock?