JSON-formatter chrome extension has gone closed source and…
0 reactions
JSON-formatter chrome extension has gone closed source and now begs for donations by hijacking checkout pages using give freely
Noticed this today after seeing an element called give-freely-root-bcjindcccaagfpapjjmafapmmgkkhgoa in inspect element which felt very concerning.
After going through the source code it seems to do geolocation tracking by hitting up maxmind.com http://maxmind.com (with a hardcoded api key) to determine what country the user is in (though doesn't seem to phone home with that information). It also seems to hit up:
* https://api.givefreely.com/api/v1/Users/anonymous?gfLibId=jsonformatterprod
* https://events.givefreely.com/popup
for tracking purposes on some websites. I'm also getting Honey ad fraud flashbacks looking through code like
k4 = "GF_SHOULD_STAND_DOWN"
though I don't really have any evidence to prove wrongdoing there.
I've immediately uninstalled it. Kinda tired of doing this chrome extension dance every 6 months.
#programming #dev #technology #js
Noticed this today after seeing an element called give-freely-root-bcjindcccaagfpapjjmafapmmgkkhgoa in inspect element which felt very concerning.
After going through the source code it seems to do geolocation tracking by hitting up maxmind.com http://maxmind.com (with a hardcoded api key) to determine what country the user is in (though doesn't seem to phone home with that information). It also seems to hit up:
* https://api.givefreely.com/api/v1/Users/anonymous?gfLibId=jsonformatterprod
* https://events.givefreely.com/popup
for tracking purposes on some websites. I'm also getting Honey ad fraud flashbacks looking through code like
k4 = "GF_SHOULD_STAND_DOWN"
though I don't really have any evidence to prove wrongdoing there.
I've immediately uninstalled it. Kinda tired of doing this chrome extension dance every 6 months.
#programming #dev #technology #js
| 4,000 mlx | |
| 5 | |
| 0 |