Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
July 1,2020

New Delhi, Jul 1: 18,653 COVID-19 cases have been reported in India in the last 24 hours, taking the country's tally of coronavirus cases to 5,85,493, informed the Union Health and Family Welfare Ministry on Wednesday.

As per the Ministry, there are presently 2,20,114 active cases in the country. The number of patients cured/discharged and migrated stands at 3,47,979.

507 deaths due to COVID-19 were reported in the last 24 hours taking the total deaths due to the virus to 17,400.

According to the ministry, Maharashtra is the worst-affected state by the virus with 1,74,761 cases including 7,855 fatalities.

Tamil Nadu is the second worst-hit state with 90,167 cases including 1,201 deaths. Meanwhile, Delhi has a total of 87,360 cases.

The Indian Council of Medical Research said that a total number of 86,26,585 tested up to June 30 of which 2,17,931 samples were tested on Tuesday.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
June 20,2020

New Delhi, Jun 20: After Prime Minister Narendra Modi said there are no foreign incursions into India, China has once again claimed that Galwan valley of Ladakh union territory is located on the Chinese side of the Line of Actual Control (LAC).

In an official statement on the step-by-step account of the Galwan face-off where 20 Indian soldiers were killed, China's foreign ministry spokesperson Zhao Lijian has said the Galwan valley is located on the Chinese side of the LAC in the west section of the China-India boundary.

"For many years, the Chinese border troops have been patrolling and on duty in this region," Zhao said alleging that since April this year, the Indian border troops have unilaterally and continuously built roads, bridges and other facilities at the LAC in the Galwan Valley.

China has lodged representations and protests on multiple occasions but India has gone even further to cross the LAC and make provocations, Zhao said.

By the early morning of May 6, the Indian border troops, who had crossed the LAC by night and trespassed into China's territory, built fortification and barricades, which impeded the patrol of Chinese border troops, Zhao said adding that they deliberately made provocations in an attempt to unilaterally change the status quo of control and management.

The Chinese border troops, he said, were "forced to take necessary measures to respond to the situation on the ground and strengthen management and control in the border areas."

In order to ease the situation, China and India have stayed in close communication through military and diplomatic channels, he said. "In response to the strong demand of the Chinese side, India agreed to withdraw the personnel who crossed the LAC and demolish the facilities, and so they did.

On June 6, the border troops of both countries held a commander-level meeting and reached consensus on easing the situation. The Indian side, he said, promised that they would not cross the estuary of the Galwan river to patrol and build facilities and the two sides would discuss and decide phased withdrawal of troops through the meetings between commanders on the ground.

"Shockingly, on the evening of June 15, India's front-line troops, in violation of the agreement reached at the commander-level meeting, once again crossed the Line of Actual Control for deliberate provocation when the situation in the Galwan Valley was already easing, and even violently attacked the Chinese officers and soldiers who went there for negotiation, thus triggering fierce physical conflicts and causing casualties."

"The adventurous acts of the Indian army have seriously undermined the stability of the border areas, threatened the lives of Chinese personnel, violated the agreements reached between the two countries on the border issue, and breached the basic norms governing international relations," the spokesperson said.

Beijing, he said, hopes that India will work with China, follow faithfully the important consensus reached between the two leaders, abide by the agreements reached between the two governments, and strengthen communication and coordination on properly managing the current situation through diplomatic and military channels, and jointly uphold peace and stability in the border areas.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
April 17,2020

New Delhi, Apr 17: The Indian Railways turned 167 years old on Thursday and for the first time ever, its trains did not carry any passengers on its birthday and instead stood idle in the yards waiting for the nationwide lockdown to end.

On this day 167 years ago, the wheels of the first passenger train in the country from Mumbai to Thane started rolling.

In 1974, Indians experienced life without trains for the first time. In May 1974 during the strike of the railways that lasted for around three weeks, drivers, station masters, guards, track staff and many others went on 'chakka jam' demanding fixed working hours for train drivers and an across-the-board pay hike.

"I can recall those times vividly. I remember that our leader George Fernandes had almost secured a deal with the then railway minister, but it fell through when it was taken to the then Prime Minister Indira Gandhi," All India Railwaymens Federation General Secretary Shiv Gopal Mishra, who was an apprentice in the railways at that time, told PTI.

"Fernandes was arrested in Lucknow. The workers went through a lot at that time. But those were days that angry workers had refused to give in and took great risks to get their demands met," he said.

However, just like this time, four decades ago too freight trains carrying essential supplies were run and the unions agreed to let some passenger trains run on the trunk routes like the Kalka Mail from Howrah to Delhi.

"Never ever in its history, there has been such a long interruption of services. Not during the World Wars, not during the 1974 railway strike, or any other national calamity or natural disaster," a railway spokesperson said.

The first Indian Railways passenger train was flagged off on April 16, 1853, from Mumbai to nearby Thane.

On Thursday, the Railway Ministry wished the railways a happy birthday on Twitter - "Today, 167 years ago with the zeal of 'never to stop' the wheels of the first passenger train from Mumbai to Thane started rolling. For the first time, passenger services are stopped for your safety. Stay indoors & make the nation victorious," it said.

Railway has suspended all passenger services since March 25 till May 3 due to the coronavirus outbreak. Around 15,523 trains run by the railways have been affected including 9,000 passenger trains and 3,000 mail express services which are run daily. It caters to over 20 million passengers every day.

According to the Union health ministry, the death toll due to coronavirus rose to 414 and the number of cases to 12,380 in the country on Thursday.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.