Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Reminds me of the silent takeover of the Stylish browser extension that was sold to some analytics company and then reported your complete browsing history to said company. No information to the users until someone noticed what what going on.

Similar things seemed to have happened to the ModHeader extension, newer versions now inject ads.



If only developers were required by package managers to sign packages with their own keys, and users warned on signature changes...


This seems to be a regular industry practice, better to move away as soon as you get to know about the change.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: