News for hackers. Stuff that matters.
Re:Mozilla stops distribution of WOT addon by raverbashing on Friday November 04, 2016 @07:11AM (#12871676)
Do you know what would be a great way to prevent this?

Every data send by an extension should be user viewable.

Here's the json file (or maybe something better) that we are posting, press Agree to send it

Re:Mozilla stops distribution of WOT addon by byuu on Friday November 04, 2016 @10:34AM (#12872832)
They would just start obfuscating the data (with ciphers, word replacements, encoding, minification, etc.)

They'd then claim it was for your security/privacy/protection. You know, like how Microsoft encrypts your Windows 10 usage data it sends them.

At least you could use the presence of such obfuscation as a sign there's probably something bad afoot. Presuming only a tiny number of extensions try to encode the data they send.

Re:Mozilla stops distribution of WOT addon by yuhong on Friday November 04, 2016 @02:14PM (#12874660)
This extension already does in fact, with double base64 (see btoa in source).
Re:Mozilla stops distribution of WOT addon by jlgaddis on Friday November 04, 2016 @12:46PM (#12873944)
> ... you could use the presence of such obfuscation as a sign there's probably something bad afoot.

So, that "if you have nothing to hide..." argument, basically?

Re:Mozilla stops distribution of WOT addon by singold on Friday November 04, 2016 @10:25PM (#12877802)
Similar but not the same, one thing is hiding your own information, but another very different is you taking my information and hiding it from me
Re:Mozilla stops distribution of WOT addon by blub on Friday November 04, 2016 @07:39AM (#12871786)
No, the only thing that will work is to pummel guilty companies into the ground with fines.

But you can bet GooBookSoft will lobby against that like their lives depended on abusing customer data. And they do depend on it.

Re:Mozilla stops distribution of WOT addon by codedokode on Friday November 04, 2016 @09:24AM (#12872314)
I do not think collecting data on users is necessary. You still can show ads in search results even if you don't know anything about a user. And you don't need user's browsing history to sell him an airplane ticket.
Re:Mozilla stops distribution of WOT addon by commentzorro on Friday November 04, 2016 @08:38AM (#12872049)
Nope. I'm going for FaceGooSoft or FaceGleSoft. First writes better. Second sounds better. But you can have the copyrite because all are fun.
Re:Mozilla stops distribution of WOT addon by mootothemax on Friday November 04, 2016 @09:46AM (#12872466)
>Nope. I'm going for FaceGooSoft or FaceGleSoft. First writes better. Second sounds better.

With much regret, MiFaceGoo is rarely appropriate in the professional world.

Re:Mozilla stops distribution of WOT addon by codedokode on Friday November 04, 2016 @09:06AM (#12872216)
You cannot make a technical solution to this. Now every company tries to collect as much information as they can. Only laws can help.

> Every data send by an extension should be user viewable.

You can start Wireshark and get that data. But it would be too complicated for an average Joe.

Re:Mozilla stops distribution of WOT addon by GTP on Friday November 04, 2016 @10:45AM (#12872936)
Most people would just press "Agree" without reading it, but giving the possibility to read the data only when you want would give to expert users the way to occasionally check what the addons are doing.