A unknown addon in firefox addon store with 4.5+ rating.

(From, most of the comments it’s seems like this addon is suspicious and don’t have enough proof or evidence to trust it with our data. So please everyone avoid using this addon. A better one is “UBLOCK ORIGIN”).

  • @tavu@sopuli.xyz
    link
    fedilink
    1311 months ago

    If you’re using Mozilla’s level of endorsement as a metric, note this prominent disclaimer on the addon’s page:

    ⚠️ This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing.

    • Alb087OP
      link
      fedilink
      English
      -111 months ago

      I didn’t say no ublock. Just asked about this one

  • TFO Winder
    link
    fedilink
    811 months ago

    Check the licence.

    If it’s not any open source licence then fundamentally not trustable.

    • Alb087OP
      link
      fedilink
      English
      011 months ago

      Why below firefox shows it under GNU GPL ?

  • umami_wasabi
    link
    fedilink
    1
    edit-2
    11 months ago

    I’m not going to tell you what to use instead, but how you make the judgement for yourself: audit the code yourself

    The source code is linked right there, and you don’t need trusting someone to make the call. You’re making the call. Mind you, the actual add-on installed from Mozilla Add-Ons might contains different code then what shown in the repo. I never release any add-ons so that is just a wild guess and a hint possibility this could happen.

    To give you an head start: look for URLs and any encoded strings in all files, be it Base64 or something else. And follow them to find out why there it is there, how is it triggered, etc. Same goes for encoded strings with the added question: what was encoded within.

    Still, that is just the basic, and I’m not too into JavaScript but there could be other ways of hiding information, like in an image file via steganography.

    • Alb087OP
      link
      fedilink
      English
      111 months ago

      I hope dns level blocking is less effective that browser level. Also dns level blocking cant apply cosmetic filters and give a clean view of webpages.