4 ms·
He said the same thing and closed the ticket on GitHub issues. My answer to that: "Your description there says it's anonymous and won't include any privacy da
by henvic 11y ago
He said the same thing and closed the ticket on GitHub issues.
My answer to that:
"Your description there says it's anonymous and won't include any privacy data. This is a blatantly lie.
People, just like me, will download and use it in good faith without knowing it is sending all the links they browse to to your analytics web service with a token to uniquely identify.
Of course you know you can retrieve personal identifying information on links such as account ids, usernames, emails, purchase orders, photo links, and more.
It's one thing to add such scripts to your own site. It's another to add a script that inconspicuously sends private data for all sites you browse to the analytics account of someone when you install an extension that has nothing to do with it. And yeah, I know many - if not most - sites use some kind of analytics service but they don't do like it.
non-https links will be even sent entirely unencrypted allowing man-in-the-middle attacks as well (e.g., private network links might end up on the Internet not only for you; and, of course, you always get the private sensitive data you claim you don't).
PS: You certainly have an attitude problem. Trying to play down this by saying you have something on the fine print and implying I am dumb? Really?"