trash
fedilink
umami_wasabi
link
fedilink
3
edit-2
5M

I’m not going to tell you what to use instead, but how you make the judgement for yourself: audit the code yourself

The source code is linked right there, and you don’t need trusting someone to make the call. You’re making the call. Mind you, the actual add-on installed from Mozilla Add-Ons might contains different code then what shown in the repo. I never release any add-ons so that is just a wild guess and a hint possibility this could happen.

To give you an head start: look for URLs and any encoded strings in all files, be it Base64 or something else. And follow them to find out why there it is there, how is it triggered, etc. Same goes for encoded strings with the added question: what was encoded within.

Still, that is just the basic, and I’m not too into JavaScript but there could be other ways of hiding information, like in an image file via steganography.

lucasmz ∞
link
fedilink
145M

@umami_wasbi @Alb087 auditing code is complicated, not everyone will know how to do that, and even the people who do can miss a lot

umami_wasabi
link
fedilink
-1
edit-2
5M

Yes, but we are not auditing security or cryptography implementation.

Instead, the goal is get a sense how it works, and look for suspicious codes or have if parts hidden (encoded) and doesn’t want people to know. That’s relatively way easier than a serious audit.

I think you greatly overestimate the average person’s ability to understand even the most basic code. Let alone in multiple languages.

umami_wasabi
link
fedilink
25M

Really? Maybe I got too used to it.

TFO Winder
link
fedilink
215M

Why not use uBlock? Widely used and gets job done

@Alb087@lemmy.ml
creator
link
fedilink
-4
edit-2
5M

deleted by creator

Why

I imagine because he is curious about using something other than the default option that everyone else is using?

Just because most people are basics doesn’t mean everyone is.

TFO Winder
link
fedilink
125M

Check the licence.

If it’s not any open source licence then fundamentally not trustable.

@Alb087@lemmy.ml
creator
link
fedilink
-1
edit-2
5M

deleted by creator

If you’re using Mozilla’s level of endorsement as a metric, note this prominent disclaimer on the addon’s page:

⚠️ This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing.

@Alb087@lemmy.ml
creator
link
fedilink
-7
edit-2
5M

deleted by creator

lucasmz ∞
link
fedilink
35M

@Alb087 @tavu yes, it doesn’t automatically mean it’s unsafe, but this is shady software none the less.

I use a few extensions which also have this warning but I do because I trust them

Pretty much everyone here is just recommending ublock origin, so just use that.

ublock origin does not have this disclaimer. It works well and is widely trusted.

They will use popups asking you to upgrade to a premium version:
https://adblockultimate.net/pricing

Which is kinda silly when they seem to mostly copy the work of others:
https://github.com/mozilla/addons/issues/1078

I second the uBlock Origin recommendation.

Otter
link
fedilink
125M

Well that’s shady

lucasmz ∞
link
fedilink
395M

@Alb087 why not use something more… trusted and probably better? ublock origin is the best around.

@Alb087@lemmy.ml
creator
link
fedilink
-22
edit-2
5M

deleted by creator

@TheSun@slrpnk.net
link
fedilink
1
edit-2
5M

Okay you asked the question, got the answer, and are clearly not listening to what people are saying and still trying to get people to agree this one is just as good…

Scrap this shitty freemium copycat add on and just use ublock origin.

It seriously is not that complicated.

lucasmz ∞
link
fedilink
75M

@Alb087 i don’t see it having more users, or ratings? ublock origin has 7m users, this has 1m. Plus, the websites to this ad blocker you mention seem like commercial. non-open-source software, I wouldn’t doubt that this is spyware.

@Alb087@lemmy.ml
creator
link
fedilink
-1
edit-2
5M

deleted by creator

lucasmz ∞
link
fedilink
55M

@Alb087 like look at this and tell me this doesn’t scream commercial, about to steal your data?

https://adblockultimate.net/

Otter
link
fedilink
275M

Users and ratings can be bought, so reputation is important.

Even if a piece of software is open source (which this supposedly is), it needs to be well known enough so that professionals are checking the code for vulnerabilities/ bad behaviour.

https://addons.mozilla.org/en-US/android/addon/ublock-origin/

Ublock Origin has 7 times the number of users anyways?

lucasmz ∞
link
fedilink
115M

@Alb087 this mascot is giving me the creeps.

@Alb087@lemmy.ml
creator
link
fedilink
1
edit-2
5M

deleted by creator

Why not DNS level AdBlock?

@Alb087@lemmy.ml
creator
link
fedilink
1
edit-2
5M

deleted by creator

lucasmz ∞
link
fedilink
35M

@Alb087 @TheBigBrother yeah DNS level is pretty limited.

I use both DNS and browser, and I prefer DNS level.

lucasmz ∞
link
fedilink
05M

@TheBigBrother Why’s that? I mean DNS has the benefit of being able to do at network level and if I could I’d do it, but I do usually keep ublock origin in my browser.

@TheBigBrother@lemmy.world
banned
link
fedilink
0
edit-2
5M

I use both cos it’s easier to use on multiple devices and it’s system-wide. So you only have to set it up in the router and you should be fine, if you are outside the home network you can always use private DNS option in android.

Create a post

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
  • Don’t promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

  • 0 users online
  • 57 users / day
  • 383 users / week
  • 1.5K users / month
  • 5.7K users / 6 months
  • 1 subscriber
  • 3.13K Posts
  • 78.3K Comments
  • Modlog