4 ms·
Hola extension has been removed from Firefox and Chrome download sites. I read the source of the Firefox extension at one point and don't remember seeing any bi
by logn 11y ago
Hola extension has been removed from Firefox and Chrome download sites. I read the source of the Firefox extension at one point and don't remember seeing any binaries or the so-called "zconsole". But CSO Online [1] is reporting the extensions were vulnerable (despite Vectra [2] not mentioning this).
It was also unclear to me how the browser extension could be used to share user's traffic; it didn't seem like the extension did that, but I didn't read the source code too carefully.
Does anyone has a copy of these extensions?
I am disappointed the Windows and Android apps were vulnerable and that Hola didn't market their software better. It's probably the coolest app since Napster. Yes, it's a botnet of sorts, but the Internet needs a way to let users disassociate themselves from IP addresses. And most proxy services are easily identified.
[1] http://www.csoonline.com/article/2928817/vulnerabilities/hola-vpn-client-vulnerabilities-put-millions-of-users-at-risk.html http://www.csoonline.com/article/2928817/vulnerabilities/hol...
[2] http://blog.vectranetworks.com/blog/technical-analysis-of-hola http://blog.vectranetworks.com/blog/technical-analysis-of-ho...
- timboslice 11y agoThe Chrome store still is hosting Hola: https://chrome.google.com/webstore/detail/hola-better-internet/mhcmfkkjmkcfgelgdpndepmimbmkbpfp https://chrome.google.com/webstore/detail/hola-better-intern...
- toni 11y agoI wonder what caused the surge of all those 5-stars positive reviews within the last 24 hours....
- psykovsky 11y agoHola's marketing team at work.
- Someone1234 11y agoTons of articles being written about it? I hate to say this, but because of Google+ it is pretty easy to see if users are legitimate or not. And from what I could tell many in those reviews are legitimate users (at least on G+).
- romland 11y agoThe "bad guys" can rate things too :)
- nissehulth 11y agoIt's almost like they had a giant network they could use for fake reviews.
- chatmasta 11y agoI looked at the source a long time ago as well. I think chrome API exposes some way to open a socket which they then use as a socks proxy.