FreeVPN.One, a verified Chrome extension with over 100k installs on the Chrome Web Store, is taking screenshots of sites users visit.

  • FreedomAdvocate
    link
    fedilink
    English
    arrow-up
    2
    ·
    7 hours ago

    I feel like browser extensions are one of the worst things to have come to the internet in terms of security. People just install them like they’re nothing, assuming they’re safe and secure because they’re on the extension store - not a terrible assumption for the average person, tbf.

    Basically every single extension you install is like “hey give me access to everything you type and everything you click on and every site you visit, and I’ll change every instance of the word “Elon” to “fElon” for you. Sound fair?”, and everyone just goes “Hell yeah! Let’s do it!”.

  • Grandwolf319@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    55
    arrow-down
    1
    ·
    16 hours ago

    Am I the only one that sees this shit and thinks:

    We are entering an age of very, very inefficient software, which is like a new layer to enshitification.

    • Zorque@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      11 hours ago

      Bruh, we entered that age like a decade ago. It’s just a lot more commonplace now.

      • Grandwolf319@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        15
        ·
        15 hours ago

        Fully agree, but also on a macro economic level, we are gonna waste sooo much resources not even for the profit motive, just because they don’t want to make quality software

  • NuXCOM_90Percent@lemmy.zip
    link
    fedilink
    English
    arrow-up
    15
    ·
    15 hours ago

    And this is why I am so obnoxious any time someone says “I found this plugin to block fandom wikis” or “I have this plugin to fix youtube embeds”.

    Code is only as safe as the people you trust to review it. And no, being open source doesn’t matter in that regard. Yes, it theoretically increases the number of eyes on but how many of those eyes who ACTUALLY look at the code are doing it with every release AND understand how to spot a vulnerability or a… whatever this is.

    Same with VPNs. NEVER trust a VPN. And sure as fuck never use a free one for anything remotely sensitive. Understand what your risk of exposure is and that, at the best of times, you are trusting a company to be telling the truth that they aren’t keeping a log of every single thing you nutted to.

    And before someone says “That is why I do everything over tor!”: Maybe also understand the concept of digital fingerprints and WHY it is that Google is able to know someone is pregnant even before they are late.

    Understand the risks and consequences of every action you take and act accordingly. And understand that there really is no one size fits all solution.

    • FreedomAdvocate
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      2
      ·
      7 hours ago

      NEVER trust a VPN.

      The only exception to this is IMO ones that have been proven in court to keep NO logs, like they claim. The only one I know of that has been tested is PrivateInternetAccess, which is why they’re the only VPN I’ve used for like 10 years.

      • NuXCOM_90Percent@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        6 hours ago

        You mean the court case from almost ten years ago?

        Yeah, that sounds safe. I mean, Google is still all about Do No Evil, right?

    • u/lukmly013 💾 (lemmy.sdf.org)@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      13 hours ago

      And sure as fuck never use a free one for anything remotely sensitive.

      I think ProtonVPN might might be an exception here. They’re pretty trustworthy as far as I know, and have some free servers.

      But my go-to is Mullvad, mainly for the flat pricing. I hate how most only have good prices if you buy a full year or so.

  • Kyrgizion@lemmy.world
    link
    fedilink
    English
    arrow-up
    17
    arrow-down
    5
    ·
    15 hours ago
    1. People who value their privacy (or “have something to hide”) have a need of a service that provides anonymity
    2. This turns said service in the ideal place to start any and all surveillance because your subjects have already self-selected for being “interesting” (especially if you intend to go after low hanging fruit)
    3. Therefore I must conclude that people using VPNs and TOR, no matter how legitimate their reasons, are in fact advertising that they have something to hide which current status quo is very interested in knowing…
    • 1rre@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      13
      ·
      edit-2
      14 hours ago

      With China, UK and afaik US (at least some states) attitude to regulation, a VPN is turning more into a necessity to browse the open internet rather than a tool for people who value privacy though

      I’ve been trying to plan a hiking trip and the number of sites, even those without any nsfw or user generated content, that just geoblock the UK because it’s not worth dealing with their government’s shit is impressive

    • felbane@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      1
      ·
      edit-2
      13 hours ago

      Chrome = virulent nonsense at this point

      When they changed the behavior of the android version to only allow either google password manager or a third party manager (not both, as it was before), they lost my interest completely (and they were already on the cliff’s edge because of the adblocker bullshit).

      Exported all of my gpass passwords and switched fully to vaultwarden and Firefox mobile.

      The internet is steadily regressing.