Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 1,2020

Washington, Jun 1: Police fired tear gas outside the White House late Sunday as major US cities were put under curfew to suppress rioting as anti-racism protestors again took to the streets to voice fury at police brutality.

With the Trump administration branding instigators of six nights of rioting as domestic terrorists, there were more confrontations between protestors and police and fresh outbreaks of looting.

Violent clashes erupted repeatedly in a small park next to the White House, with authorities using tear gas, pepper spray and flash bang grenades to disperse crowds who lit several large fires and damaged property.

Local US leaders appealed to citizens to give constructive outlet to their rage over the death of an unarmed black man in Minneapolis, while night-time curfews were imposed in cities including Washington, Los Angeles and Houston.

One closely watched protest was outside the state capitol in Minneapolis' twin city of St. Paul, where several thousand people gathered before marching down a highway.

"We have black sons, black brothers, black friends, we don't want them to die. We are tired of this happening, this generation is not having it, we are tired of oppression," said Muna Abdi, a 31-year-old black woman who joined the protest.

"I want to make sure he stays alive," she added in reference to her son, aged three.

Hundreds of police and National Guard troops were deployed ahead of the protest.

At one point, some of the protestors who had reached a bridge were forced to scramble for cover when a truck drove at speed after having apparently breached a barricade.

The driver was later taken to hospital after the protestors hauled him from the vehicle, although there were no immediate reports of other casualties.

There were other large-scale protests in cities including New York and Miami.

Washington's mayor ordered a curfew from 11:00 pm until 6:00 am, as a report in the New York Times said that President Donald Trump had been rushed by Secret Service agents into an underground bunker at the White House on Friday night during an earlier protest.

Stores ransacked

Large-scale violence has rocked many US cities in recent days, and looters ransacked stores in a neighborhood of Philadelphia on Sunday.

In the Los Angeles suburb of Santa Monica, looting was reported at stores in a popular beachside shopping center.

Officials in LA -- a city scarred by the 1992 riots over the police beating of Rodney King, an African-American man -- imposed a curfew from 4:00 pm Sunday until dawn.

"Please, use your discretion and go early, go home, stay home and help us make sure that those who want to change this conversation from being about racial justice to be about burning things and looting things, don't win the day," the city's mayor Eric Garcetti said on CNN.

The shocking videotaped death last Monday of an unarmed black man, George Floyd, at the hands of police in Minneapolis ignited the nationwide wave of outrage over law enforcement's repeated use of lethal force against unarmed African Americans.

Floyd stopped breathing after Minneapolis police officer Derek Chauvin knelt on his neck for nearly nine minutes.

Chauvin has been charged with third-degree murder and is due to make his first appearance in court on Monday. Three other officers with him have been fired but for now face no charges.

Governor Tim Walz has mobilized all of Minnesota's National Guard troops  -- the state guard's biggest mobilization ever -- to help restore order.

Police fired tear gas and stun grenades to clear streets of curfew violators Saturday night in Minneapolis.

Walz extended a curfew for a third night Sunday and praised police and guardsmen for holding down violence. "They did so in a professional manner. They did so without a single loss of life and minimal property damage," he said.

"Congratulations to our National Guard for the great job they did immediately upon arriving in Minneapolis, Minnesota, last night," President Donald Trump tweeted, adding that they "should be used in other States before it is too late!"

The Department of Defense said that around 5,000 National Guard troops had been mobilized in 15 states as well as the capital Washington, with another 2,000 on standby.

The widespread resort to uniformed National Guards units is rare, and it evoked disturbing memories of the rioting in US cities in 1967 and 1968 in a turbulent time of protest over racial and economic disparities.

Trump blamed the extreme left for the violence, saying he planned to designate a group known as Antifa as a terrorist organization.

"The violence instigated and carried out by Antifa and other similar groups in connection with the rioting is domestic terrorism and will be treated accordingly," added Attorney General Bill Barr.

'A nation in pain'

Atlanta Mayor Keisha Lance Bottoms said Trump, who has often urged police to use tough tactics, was not helping matters.

"We are beyond a tipping point in this country, and his rhetoric only enflames that," she said on CBS.

Joe Biden, Trump's likely Democratic opponent in November's presidential election, visited the scene of one anti-racism protest.

"We are a nation in pain right now, but we must not allow this pain to destroy us," Biden tweeted, posting a picture of him speaking with an African-American family at the site where protesters had gathered in Delaware late Saturday.

Floyd's death has triggered protests beyond the United States, with hundreds rallying outside the US embassy in London in solidarity.

"I'm here because I'm tired, I'm fed up with it. When does this stop?" Doreen Pierre told AFP at the protest.

In Germany, England football international Jadon Sancho marked one of his three goals for Borussia Dortmund against Paderborn by lifting his jersey to reveal a T-shirt bearing the words "Justice for George Floyd".

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 28,2020

New Delhi, May 28: The Crime Branch of the Delhi Police will file 12 chargesheets against 536 Tablighi Jamaat members from three countries, officials said on Thursday.

Till now, the police has already filed chargesheets against 374 foreigners from 32 countries.

The officials said the charges against the Tablighi Jamaat members pertain to violation of visa rules, government guidelines regarding the Epidemic Disease Act and acting negligently in a way that was likely to spread infection of disease dangerous to life.

The Tablighi Jamaat, a religious organisation in Nizamuddin in South Delhi, had allegedly organised a congregation in March in violation of mass gatherings.

The Tablighi Jamaat’s Nizamuddin Markaz (centre) had become a coroavirus hotspot in the national capital.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
February 10,2020

New Delhi, Feb 10: The government is set to privatise Central Electronics Ltd, a CPSE under the Department of Science and Technology, by selling its 100% stake with management control and has invited the Expression of Interest for the same by March 16.

The selected bidder will be required to lock in its shares for a period of three years during which it cannot undertake the sale of its stake in CEL, the PIM (Preliminary Information Memorandum) said.

"The government of India has 'in-principle' decided to disinvest 100 per cent of its equity shareholding in CEL (which is equivalent to 100 per cent of the total paid up equity share capital of CEL) through Strategic Disinvestment with transfer of management control (Strategic Disinvestment or Transaction)," DIPAM, the Disinvestment Department, said.

The process for the transaction has been divided into two stages, namely, Stage I and Stage II.

After BPCL and Air India, this is yet another CPSE which government is slated to privatise if it gets offers from bidders.

The government has set a challenging target of Rs 2.1 lakh crore disinvestment proceeds from CPSE sell-offs and IPOs, OFSs (Offer for sale) in the next fiscal and it going out all guns blazing to meet that target after revising this fiscal target of Rs 1.05 lakh crore to Rs 65,000 crore.

The Interested Bidders (which can also include employees of CEL) must have a minimum net worth of Rs 50 crore as on March 2019. DIPAM has released complete invitation Preliminary Information Memorandum (PIM) of CEL. Resurgent India Limited is the advisor to the Transaction.

CEL is a pioneer in the country in the field of Solar Photovoltaic (SPV) with the distinction of having developed India's first Solar cell in 1977 and first Solar panel in 1978 as well as commissioning India's first solar plant in 1992.

More recently, it has developed and manufactured the first crystalline flexible solar panel especially for use on the passenger train roofs in 2015.

Its solar products have been qualified to International Standards IEC 61215/61730. CEL is further working on development of a range of new and upgraded products for signaling and telecommunication in the railway sector.

In the SWOT analysis of the CPSE, DIPAM has stated under weakness that "the company has weak financial loss due to past losses, high manufacturing cost and non payment of dues by state nodal agencies affecting the financial position of the company".

The CPSE has adequate land for expansion, the SWOT analysis said adding "the CPSE faces threat of dumping of solar cells at very low rates which makes solar PV manufacturing industry unviable".

Entry of new players in the market for solar products and railway signalling systems also is cited as a threat.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.