Chrome, Firefox browser extensions leaked millions of users' data

Agencies
July 20, 2019

Popular browser extensions like ad blockers have been caught harvesting personal data of millions of consumers who use Chrome and Firefox -- not only their browsing histories but also exposing tax returns, medical records, credit card information and other sensitive data in the public domain.

According to an independent cyber security researcher Sam Jadali, the data has been leaked to a fee-based company called Nacho Analytics that gives unlimited access to any websites analytics data.

The data could be purchased for as little as $10 to $50, said Jadali whose report was first described in Ars Technica late on Friday.

"This non-stop flow of sensitive data over the past seven months has resulted in the publication of links to home and business surveillance videos hosted on Nest and other security services.

"Tax returns, billing invoices, business documents, and presentation slides posted to, or hosted on, Microsoft OneDrive, Intuit.com, and other online services" have been exposed, said the report.

The exposed data via eight browser extensions also include vehicle identification, numbers of recently bought automobiles, along with the names and addresses of the buyers.

Patient details, travel itineraries, Facebook Messenger attachments and Facebook photos, even private, are now available in the public domain.

Browser extensions - also known as plug-ins or add-ons - are apps that consumers can install to run alongside their browser for additional functionality.

The affected extensions were apps used by millions of people, including HoverZoom, SpeakIt!, and FairShare Unlock.

"The extensions have been remotely removed or disabled in consumers' browsers and are no longer available for download," said both Google and Firefox.

People who didn't download the extensions may also be affected.

"Nobody is immune to this. Even if you don't have any harmful extensions, the other people you interact with may have an extension on their computers that could be leaking the data you share with them," Jadali was quoted as saying.

Nacho Analytics, for example, promises to let people "see anyone's analytics account" and to provide "real-time web analytics for any website".

The company charges $49 per month, per domain, to monitor any of the top 5,000 most widely-trafficked websites.

The security expert has suggested users to delete all browser extensions they have installed in the past.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
June 22,2020

Chennai, Jun 22: Commuting the death sentence to life imprisonment for five convicts, the Madras High Court on Monday set free Chinnasamy, the main convict, who had also been sentenced to death in the Udumalpet Shankar honour killing case.

A Division Bench comprising Justice M. Sathyanarayanan and Justice M. Nirmal Kumar also dismissed the appeal by the state police against the acquittal of three persons by a lower court.

The Bench ordered the five convicts sentenced for life to undergo a jail term of not less than 25 years.

In 2016, V. Shankar, who had married C. Kausalya, was killed by a gang in Udumalpet in Tamil Nadu. The gang also injured Kausalya in the attack.

It was alleged the parents of Kausalya -- Chinnasamy, Annalakshmi -- were against the marriage.

P. Pandidurai, the uncle of Kausalya at the behest of Chinnasamy and Annalakshmi had hired a gang to kill Shankar.

The gang killed Shankar in broad daylight in a public place and Kausalya too got injured in the attack as she tried to save her husband.

The Principal District and Sessions Court in Tiruppur had convicted and sentenced to death six accused persons -- Chinnasamy, P. Jagadeesan, P. Selvakumar, M. Manikandan, M. Mathan alias Michael and P. Kalaithamilvaanan.

The court also sentenced two other accused, K. Dhanraj for life and Manikandan to a five year jail term, while acquitting Annalakshmi, Pandidurai and Prasanna.

The convicts had filed an appeal against their sentence in the Madras High Court while the police filed an appeal against the acquittal of three persons.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 22,2020

New Delhi, June 22: Former Prime Minister Manmohan Singh on Monday asked Prime Minister Narendra Modi to be “mindful of the implication of his words” as a controversy raged over his “no intrusion” remark about the violent face-off with Chinese troops in the Galwan Valley.

“The Prime Minister must always be mindful of the implications of his words and declarations on our Nation’s security as also strategic and territorial interests,” Singh said in a statement here as Chinese media welcomed Modi’s ‘no intrusion’  remarks contending that it may lead to a de-escalation of tensions between China and India.

Congress has been maintaining that Modi’s assertions at Friday’s all-party meeting that neither was there any intrusion nor was any Indian post captured ran counter to the statements made by the Indian Army and the External Affairs Ministry.

Singh said the prime minister cannot allow his words to be used by China as a vindication of its position and all organs of the government should work together to tackle this crisis and prevent it from escalating further.

“We remind the Government that disinformation is no substitute for diplomacy or decisive leadership. The truth cannot be suppressed by having pliant allies spout comforting but false statements,” the former prime minister said.

Singh said the prime minister and the government should rise to the occasion to ensure justice for Colonel B Santosh and the army jawans who made the supreme sacrifice and resolutely defended the nation’s territorial integrity.

“To do any less would be a historic betrayal of the people’s faith,” the former prime minister said.

“At this moment, we stand at historic crossroads. Our Government’s decisions and actions will have serious bearings on how the future generations perceive us,” Singh said.

Singh said China was brazenly and illegally seeking to claim parts of Indian territory such as the Galwan Valley and the Pangong Tso Lake by committing multiple incursions between April 2020 till date.  

“We cannot and will not be cowed down by threats and intimidation nor permit a compromise with our territorial integrity,” said Singh. 

The former prime minister said this was a moment where “we must stand together as a nation and be united in our response to this brazen threat.”

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
June 7,2020

New Delhi, Jun 7: A day after India and China military commanders held "cordial and positive" talks at Chushul-Moldo point along the Line of Actual Control in Eastern Ladakh, Ministry of External Affairs said the two countries have agreed to "peacefully" resolve the situation in the border areas by continuing the military and diplomatic engagements.

The Indian delegation led by 14 Corps Commander Lt Gen Harinder Singh on Saturday met his Chinese equivalent Maj Gen Liu Lin, who is the commander of South Xinjiang Military Region of the Chinese People's Liberation Army, to address the ongoing tussle in Eastern Ladakh.

In a statement on Sunday, the MEA said that the meeting between the Corps Commander based in Leh and the Chinese Commander took place in a "cordial and positive atmosphere".

"Both sides agreed to peacefully resolve the situation in the border areas in accordance with various bilateral agreements and keeping in view the agreement between the leaders that peace and tranquillity in the India-China border regions is essential for the overall development of bilateral relations," the statement read.

They also noted that this year marked the 70th anniversary of the establishment of diplomatic relations between the two countries and agreed that an early resolution would contribute to the further development of the relationship.

"Accordingly, the two sides will continue the military and diplomatic engagements to resolve the situation and to ensure peace and tranquillity in the border areas," it further read.

China has moved its troops along the Line of Actual Control (LAC) in the Eastern Ladakh areas including the Finger area, Pangong Tso Lake, and Galwan Nala area.

The meeting between military commanders was to discuss and resolve the stand-off in Eastern Ladakh.

Following the meeting, the Army Headquarters' Directorate General of Military Operations also briefed the Ministry of External Affairs and other concerned government officials about the discussions.

On Friday, officials of India and China interacted through video-conferencing with the two sides agreeing that they should handle "their differences through peaceful discussion" while respecting each other's sensitivities and concerns and not allowing them to become disputes in accordance with the guidance provided by the leadership.

In the last few days, there has not been any major movement of the PLA troops at the multiple sites where it has stationed itself along the LAC opposite Indian forces.

The Chinese Army's intent to carry out deeper incursions was checked by the Indian security forces by quick deployment.

The Chinese have also brought in heavy vehicles with artillery guns and infantry combat vehicles in their rear positions close to the Indian territory.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.