hamster_nipples

4 ms·

1.
by hamster_nipples 12y ago
> And there has never been such thing as Inspectlet in the app Looks like you forgot to delete the HTML comment tag, "", from the bottom of popup.html. You may want to do it asap befo
2.
by hamster_nipples 12y ago
The developer had already posted the source code on GitHub back in March 16 2014 and has not pushed anything since. Somewhere between March and September he added Inspectlet, Google Analytics and Double Click to his local copy and uploaded
3.
by hamster_nipples 12y ago
> The whole point of me posting this on HackerNews was 'The Guy on webstore is lying'. I'm that guy. No, I am not lying. I have the original version (prior to Aug 27 update) that recorded keystrokes. After reading your c
4.
by hamster_nipples 12y ago
> And there has never been such thing as Inspectlet in the app I had downloaded the crx file before you removed Inspectlet. Yes. There was such a thing as Inspectlet in the app, and it was used specifically to record user keystrokes.
5.
by hamster_nipples 12y ago
> Your note data isnt logged to any servers in this app. Analytics aggregate data are just the strawman. Note data WAS in fact being recorded from individual users and sent to Inspectlet servers.
6.
by hamster_nipples 12y ago
Your app is neither private nor secure. I saved the original version before you read my review. DevTools clearly shows it recording keystroke events. Just out of curiosity, why did your app also open a websocket connection to herokuapp.com?
7.
by hamster_nipples 12y ago
I am the guy who made the original claim. You integrated the Inspectlet screen recorder and keylogger into your extension. Enough said. The popup's textarea className had a hyphen, which caused inspectlet to include this in the data to