Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
July 16,2020

Mumbai, Jul 16: Poet-activist Varavara Rao has tested positive for Covid-19. The 80-year old, named as accused in the Elgar Parishad case, was shifted to state-run JJ Hospital from Taloja central jail where he was lodged after he complained of dizziness. The hospital conducted tests including one for Covid-19 the results for which confirmed that he is positive.

Dr Ranjit Mankeshwar, the dean of JJ Hospital said, “He has shown no symptoms of Covid-19 so far. He has no breathing difficulty and is stable. We will soon shift him to a Covid hospital.” Rao is likely to be shifted to St George hospital.

Last week, Rao’s family had held a press conference after receiving a call from him from prison. His family had then said that his condition was deteriorating and he should be provided immediate medical aid. He was earlier shifted to the hospital when he fell unconscious in jail in May but was discharged within three days. The family had said that he was not provided proper medical treatment.

Last month, a special court had rejected his interim bail plea where he had cited his susceptibility to the virus due to his age and other medical conditions. The court, however, had said the superintendent of prison has been directed to take appropriate measures in such cases where medical attention is required. Before he was shifted to the hospital on Tuesday, Rao was admitted to the hospital ward of the jail and as he had been unable to do basic chores without depending on other inmates.

An appeal against the special court’s order is pending before the Bombay High Court. The plea is likely to be heard tomorrow.

Comments

Naresh
 - 
Thursday, 16 Jul 2020

Real criminals got bail or they r free from jail becoz of corona. Varavara rao and other innocents under custody.

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
February 18,2020

New Delhi, Feb 18: A Delhi court today sent Sharjeel Imam, who has been named as an "instigator" by the Delhi Police in its chargesheet on violent protests against the amended citizenship act at New Friends Colony near Jamia in Delhi last year, to judicial custody till March 3.

Sharjeel Imam was arrested on sedition charges last month.

The Delhi Police has filed a chargesheet before Chief Metropolitan Magistrate Gurmohina Kaur, naming Sharjeel Imam as an instigator of the violence.

It said it has attached CCTV footage, call detail records and statements of over 100 witnesses as evidence in the chargesheet.

The court had on Monday sent Sharjeel Imam to one-day custody of Delhi Police in the case.

Protestors had torched four public buses and two police vehicles as they clashed with police in New Friends Colony near Jamia Millia Islamia in Delhi during the demonstration against the CAA on December 15, leaving nearly 60 people including students, cops and fire fighters injured.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
July 7,2020

India's COVID-19 tally raced past the seven lakh-mark with 22,252 fresh infections on Tuesday, five days after crossing the six lakh post, while the death toll climbed to 20,160 as 467 more people succumbed to the disease, according to the Union health ministry.

With this, the country has recorded over 20,000 cases of the infection for the fifth consecutive day.

India's coronavirus infection caseload stands at 7,19,665, the ministry's data updated at 8 am showed.

With a steady rise, the number of recoveries stands at 4,39,947, while there are 2,59,557 active cases of coronavirus infection in the country.

"Thus, around 61.13 % of patients have recovered so far," an official said.

The total number of confirmed cases also includes foreigners.

Of the 467 deaths reported in the last 24 hours, 204 are from Maharashtra, 61 from Tamil Nadu, 48 from Delhi, 29 from Karnataka, 24 from Uttar Pradesh, 22 from West Bengal, 17 from Gujarat.

Telangana and Haryana reported 11 deaths each; Madhya Pradesh nine; Andhra Pradesh seven; Jammu and Kashmir six; Rajasthan and Punjab five each; Bihar, Kerala and Odisha two each; and Arunachal Pradesh and Jharkhand one each.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.