No, you’re not being paranoid. Sites really are watching your every move

[upnorth]

Thanks for the links @upnorth but can i ask, if these extensions safe to download from the chrome store (just because of all the talk recently of unsafe apps on the chrome store) i am not clever enough to know if they are genuine and are they user friendly for dummies like me ?

Your not a dummie IMO mate and especially since your here on this forum and ask questions and learn new things just like myself.

Deeper testings on extensions like this I belive members like @Opcode and a few others could do best. A few basic tips I would advice anyone is that before installing always take the time and search for the vendor/developer/extension/app name both here and through google and read about any possible pros and cons in reviews and also always, always check the main Website url in the web store as that should always point to the developers/vendors official site.

Checking the date on the latest version and if it's updated regularly should also give you a good clue. Don't use too many extensions as that in itself make the risk higher getting crap on your machine that you don't want. Good luck!

I sent a request to @Opcode .

 

[Deleted member 65228]

I took a quick look at ScriptSafe for you as @upnorth requested and it appears to be genuine and clean as far as I can tell.

The extension also uses hosts from lists such as MVPS Hosts, hpHOSTS, Malware Domain List and others. It also appears to have support for removing social networking related scripts (e.g. probably Like buttons for example). Alongside other things mentioned that it can do.

I don't think the extension is suspicious or has any malicious intents therefore my personal verdict is that it can be trusted and is clean.

 

[HarborFront]

Would a software like Zemana Antilogger be helpful in this case?

I doubt so...even for virtual keyboard....because if anti-keylogger/virtual keyboard can do the job they would have been mentioned as countermeasures in the recent articles regarding this subject

 

[oneeye]

Greetings all,

Let me just say, "WOW! So many great responses by diehard security fans, and very knowledgeable.

Here is the complete list of websites from the researchers. It's available to view html:
Site list

or download a zipped CSV file here: https://webtransparency.cs.princeton.edu/no_boundaries/data/sr_site_list.csv.zip

And the technical research article for those who want to dive into the methods.
No boundaries: Exfiltration of personal data by session-replay scripts

Sorry I'm late to the party, I need to check my email more often. Thanks to all who took interest in this issue.

I expect this to get more attention from the infosec community, and have seen many writing and podcasting already.

 

[oneeye]

I am actually surprised, what all it blocks: canvas, webrtc, malware domains, youtube ads. I can remove several and replace just with this one.

The canvas options are great: people were discussing which is better: unique, random or none. This lets you to choose from all.

If anyone is interested in fingerprinting, this site has several great articles on the subject. You might say, they even specialized in trying to negate online fingerprinting. I found it very informative.

Everything You Need to Know About Canvas Fingerprinting | Multiloginapp

 

[HarborFront]

Greetings all,

Let me just say, "WOW! So many great responses by diehard security fans, and very knowledgeable.

Here is the complete list of websites from the researchers. It's available to view html:
Site list

or download a zipped CSV file here: https://webtransparency.cs.princeton.edu/no_boundaries/data/sr_site_list.csv.zip

And the technical research article for those who want to dive into the methods.
No boundaries: Exfiltration of personal data by session-replay scripts

Sorry I'm late to the party, I need to check my email more often. Thanks to all who took interest in this issue.

I expect this to get more attention from the infosec community, and have seen many writing and podcasting already.

Already posted in post #17

 

[HarborFront]

If anyone is interested in fingerprinting, this site has several great articles on the subject. You might say, they even specialized in trying to negate online fingerprinting. I found it very informative.

Everything You Need to Know About Canvas Fingerprinting | Multiloginapp

Actually, ScriptSafe Chrome extension protects against other types of fingerprinting besides canvas fingerprinting

 

[Weebarra]

Your not a dummie IMO mate and especially since your here on this forum and ask questions and learn new things just like myself.

Deeper testings on extensions like this I belive members like @Opcode and a few others could do best. A few basic tips I would advice anyone is that before installing always take the time and search for the vendor/developer/extension/app name both here and through google and read about any possible pros and cons in reviews and also always, always check the main Website url in the web store as that should always point to the developers/vendors official site.


Checking the date on the latest version and if it's updated regularly should also give you a good clue. Don't use too many extensions as that in itself make the risk higher getting crap on your machine that you don't want. Good luck!

I sent a request to @Opcode .

Thanks for the advice @upnorth, i will take it on board and i tried to look yesterday at all that you mentioned in your post but i still couldn't decide .

I took a quick look at ScriptSafe for you as @upnorth requested and it appears to be genuine and clean as far as I can tell.

The extension also uses hosts from lists such as MVPS Hosts, hpHOSTS, Malware Domain List and others. It also appears to have support for removing social networking related scripts (e.g. probably Like buttons for example). Alongside other things mentioned that it can do.

I don't think the extension is suspicious or has any malicious intents therefore my personal verdict is that it can be trusted and is clean.

Many thanks to you @Opcode, you are a

my friend, you do so much to advise people and i am grateful to you. I was trying to weigh up the options if it was worth installing another extension then decided to look at the list posted above and thought nah, it isn't worth it really ............... but as i went further through the list i see there are least 20 sites i use and i only got to page 25 so my mind has been made up, in it goes.

Thanks again everyone for the advise and also to @oneeye for posting in the first place

 

[DeepWeb]

I see Yandex alot... Isn't that the company that some people entrust to protect their privacy? Or is that another Yandex?