5 ms·

Here's list of other extensions which have been recently flagged by community for similar behaviour - Auto Refresh Premium, static.trckljanalytic.com - Stream

Here's list of other extensions which have been recently flagged by community for similar behaviour - Auto Refresh Premium, static.trckljanalytic.com - Stream Video Downloader, static.trckpath.com - Custom Feed for Facebook, api.trackized.com - Notifications for Instagram, pc.findanalytic.com - Flash Video Downloader, static.trackivation.com - Ratings Preview for YouTube, cdn.webtraanalytica.com Copied from https://github.com/greatsuspender/thegreatsuspender/issues/1263#issuecomment-760600299 https://github.com/greatsuspender/thegreatsuspender/issues/1...

sn_master 6y ago
I wonder how many of those tracking websites or even the extensions themselves are owned by the same entity. That's a pretty common practice.
rplnt 6y ago
Is there an extension that can track my extensions?
- jhloa2 6y ago
  I was just thinking about something similar. It would be nice if at a minimum, we could put together a list of compromised extensions. I feel like I've seen quite a few of these reports recently
  - pault 6y ago
    It should be possible to look at the source code of known compromised extensions and put together a list of heuristics that could automate part of the process. Minifiers make it more difficult though.
- Bayart 6y ago
  You should be able to do some of that at the debug console level. But otherwise you're stuck tracking traffic at page level, at least as far as I know.
ufmace 6y ago
It's things like this that make me a lot more reluctant to install extensions that might be moderately convenient. Maybe they're okay now, but it's too much of a burden to keep track of what I have installed and which ones are known to be doing something nasty. Another loser in this whole game is the honest hobby extension developers, who have to deal with the power-users who might promote their extensions not wanting to bother for fear of not being able to keep a watch for potential malicious updates for all of them.
ramraj07 6y ago
My general policy is to never install any extension that has full browser acceess. Except if it's from the faang companies themselves.
ant6n 6y ago
I wonder whether paying for extensions could be a way to build more trust.
zerd 6y ago
My wife installed an addon to be able to post Instagram posts from her laptop, and then suddenly clicking on google search results would sometimes, but not always hijack and redirect to bing, and then click on one of the ads. But it was clever because it only happened sometimes, and if she retried it it didn't happen, so whenever she would try to show me, it didn't happen. I just removed all her addons and the problem went way, so not sure which one it was.

sn_master 6y ago

I wonder how many of those tracking websites or even the extensions themselves are owned by the same entity. That's a pretty common practice.

rplnt 6y ago

Is there an extension that can track my extensions?

jhloa2 6y ago
I was just thinking about something similar. It would be nice if at a minimum, we could put together a list of compromised extensions. I feel like I've seen quite a few of these reports recently
- pault 6y ago
  It should be possible to look at the source code of known compromised extensions and put together a list of heuristics that could automate part of the process. Minifiers make it more difficult though.
Bayart 6y ago
You should be able to do some of that at the debug console level. But otherwise you're stuck tracking traffic at page level, at least as far as I know.

ufmace 6y ago

It's things like this that make me a lot more reluctant to install extensions that might be moderately convenient. Maybe they're okay now, but it's too much of a burden to keep track of what I have installed and which ones are known to be doing something nasty. Another loser in this whole game is the honest hobby extension developers, who have to deal with the power-users who might promote their extensions not wanting to bother for fear of not being able to keep a watch for potential malicious updates for all of them.

ramraj07 6y ago

My general policy is to never install any extension that has full browser acceess. Except if it's from the faang companies themselves.

ant6n 6y ago

I wonder whether paying for extensions could be a way to build more trust.

zerd 6y ago

My wife installed an addon to be able to post Instagram posts from her laptop, and then suddenly clicking on google search results would sometimes, but not always hijack and redirect to bing, and then click on one of the ads. But it was clever because it only happened sometimes, and if she retried it it didn't happen, so whenever she would try to show me, it didn't happen. I just removed all her addons and the problem went way, so not sure which one it was.