Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
April 28,2024

Prajwal.jpg

Bengaluru: JD(S) leader H D Kumaraswamy on Sunday said he would like to wait for the facts to come out of the investigation into an alleged sex scandal involving his nephew and Hassan MP Prajwal Revanna, but asserted that there is no question of forgiving anyone who has committed a crime as per law.

The former chief minister said he has nothing to do with Prajwal Revanna reportedly leaving the country, and it is the responsibility of the Special Investigation Team (SIT) to get him back if required.

The 33-year-old Prajwal Revanna is the son of former prime minister and JD(S) patriarch H D Deve Gowda's elder son H D Revanna, who is an MLA and former minister.

Some explicit video clips allegedly involving Prajwal Revanna had started making the rounds in Hassan in recent days.

Prajwal Revanna is the BJP-JD(S) alliance's candidate from Hassan, which went to polls on Friday.

Kumaraswamy said, "I have noticed that the chief minister has ordered an SIT probe. Whether it is me or Deve Gowda (his father), we have always conducted ourselves respectfully towards women and have responded positively when anyone came with any sufferings. We have tried to address them."

Speaking to reporters here, he said, "The Hassan related issue that started during elections, let the facts come out through a probe. Whoever it is, who has committed the mistake as per the law of the land...there is no question of forgiving anyone who has committed the mistake. So let the facts come out from the probe, after that I will react."

To a question on Prajwal Revanna going to a foreign country, Kumaraswamy said, "It is not related to me. SIT probe has been ordered, officials have been put to work. If he has gone to a foreign country, getting him back is their responsibility. What should I say, if I'm asked. They (SIT) will get him, don't worry."

Chief Minister Siddaramaiah announced the decision to constitute a SIT to probe the alleged sex scandal involving the MP.

Meanwhile, the police have information that Prajwal has left the country, according to a statement issued by the Chief Minister’s office.

"Prajwal Revanna’s explicit video clips are being circulated in Hassan and it appears prime facie that women were sexually assaulted,' the statement said, adding that the government decided to form an SIT based on a petition by the chief of the Karnataka State Commission for Women.

The Commission's chairperson Dr Nagalakshmi Chaudhary on Thursday wrote to Siddaramaiah and state police chief Alok Mohan, seeking a probe into the videos that are in circulation in Hassan.

Prajwal has through his election agent lodged a complaint with the authorities that the videos are "doctored" and being circulated to tarnish his image ahead of elections.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
April 27,2024

The spokesman for the Yemeni Armed Forces has said it has carried out new operations against American and British targets in retaliation for their aggression on the country.

Brigadier General Yahya Saree said on Friday that Yemen’s naval forces struck a British oil tanker in the Red Sea with missiles.

Saree also said the military also shot down an American MQ-9 drone in Sa’ada province.

He added that the new operations were also a show of solidarity with Palestinians in the Gaza Strip, amid the Israeli genocide there. 

“The Yemeni Armed Forces salute all the people of Yemen for their faithful response to the call of the fighter leader Sayyed Abdulmalik Badr El-Din Al-Houthi, may Allah protect him, in their unprecedented large-scale interaction in support of our oppressed brothers in the Gaza Strip, affirming support for the Armed Forces in their military operations against the ‘Israeli’ enemy and against the American-British aggression supporting it in the Red and Arabian Seas and the Indian Ocean,” Saree said.

He stressed that the Yemeni armed forces will continue operations in the Red and Arabian Seas as well as the Indian Ocean until the Western-backed Israeli genocide comes to a halt.

Since the start of the brutal campaign in Gaza, the regime has killed more than 34,300 Palestinians and injured over 77,000 others. It has cut off fuel, electricity, food and water to the more than two million Palestinians living there.

The Yemeni Armed Forces have been targeting Israeli vessels or those “associated” with the occupying regime in the Red Sea and the Arabian Sea since October 7, 2023.

The regime ignited its bloody war machine in the besieged Palestinian territory on that October day in response to Operation Al-Aqsa Storm conducted by the resistance movement Hamas.

The maritime attacks have forced some of the world’s biggest shipping and oil companies to suspend transit through one of the world’s most important maritime trade routes.

Tankers are instead adding thousands of miles to international shipping routes by sailing around the continent of Africa rather than going through the Suez Canal.

The pro-Palestine maritime campaign has also prompted airstrikes by the US and its allies on Yemen – in violation of the Yemeni sovereignty and international law.

In consequence, Yemen’s armed forces have declared US and British vessels as legitimate targets.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
April 24,2024

rahulgowda.jpg

Bengaluru: Former Prime Minister H D Deve Gowda on Wednesday slammed Rahul Gandhi’s "wealth redistribution promise", stating that only someone with no practical knowledge can speak like that.

 “He is dreaming of a revolution. By talking about wealth redistribution, Rahul Gandhi has insulted and humiliated two Congress Prime Ministers who brought market reforms and increased the wealth of the nation,” he added, recalling the contribution of P V Narasimha Rao and Manmohan Singh in economic liberalisation.

Accusing Gandhi of indirectly trying to say that what the two Congress Prime Ministers did was wrong, Gowda said, "He (Rahul Gandhi) has torn up their economic reforms like he had torn up an ordinance (which sought to overturn the rule that disqualifies convicted MPs and MLAs) issued by (the then) Manmohan Singh (government)."

The 90-year-old JD(S) supremo ridiculed the Congress manifesto claiming that only a party that is sure of never coming to power can make as many promises.

“The Congress has promised so many things in its manifesto. The only party that is very sure of never coming to power will promise so much,” Gowda said at a press conference here.

He said the Congress wants to turn this country 'upside down' and the promises made by it indicated that it wants to come to power 'at any cost'.

“Rahul Gandhi wants to do a wealth survey and distribute the wealth. Does he think he is a mass leader,” Deve Gowda said.

Picking up points from the Congress manifesto ‘Nyay Patra’, Gowda said Rahul Gandhi wants to 'give 30 lakh new central government jobs and run this country'.

“There are only 40 lakh sanctioned jobs. How can he create 30 lakh more jobs overnight? How much will he pay these people? Where will he employ them,” he asked.

“Only someone with no practical knowledge can speak like this. (P) Chidambaram was the manifesto committee chairman. Does he agree with Rahul Gandhi’s immature economic ideas,” Gowda said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.