Spyware inserted into "BlockSite" add-on.
August 10, 2013
An old and unmaintained add-on, "BlockSite", has been taken over by
a new developer. The new developer has installed tracking software
to "phone home" and report the user's browsing.
The new developer, wips.com, is in the user tracking business.
There are other "wips.com" add-ons that now need to be checked.
Worse, they offer development tools for building add-ons which build in their
"tracking" features. So there may be Mozilla add-ons with their
tracking code that aren't labelled as being from "wips.com".
Once the tracking code has been identified, all add-ons need to
be checked for it.
Full post moz.dev.security list: »groups.google.com/forum/#!topic/ ··· 2Mq87i-o--
Gladiator Security Forum