1312748 - Block Add-on GUID [e-mail]

Status: RESOLVED FIXED

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Andreas Wagner [:TheOne] [use NI]]

This add-on claims to be a flash plugin and it does some work on youtube, but it also steals your facebook and adfly credentials and sends them to a remote server.

For reference:
https://addons.mozilla.org/en-US/editors/review/aktualizacja-flash

All versions of this add-on should be blocked (as all signed ones are affected).

Comment 1

[Andrew Williamson [:eviljeff]]

Blocked:
https://addons.mozilla.org/en-US/firefox/blocked/i1278

(Add-on status on AMO not changed)

Comment 2

[Andreas Wagner [:TheOne] [use NI]]

Oh, I found some clones of this, although not all are affected (yet).

We should block also: [e-mail] versions 1.3 and higher

Comment 3

[Andrew Williamson [:eviljeff]]

(In reply to Andreas Wagner [:TheOne] from comment #2)
> Oh, I found some clones of this, although not all are affected (yet).
> 
> We should block also: [e-mail] versions 1.3 and higher

only 1.3 and higher?

Comment 4

[Andreas Wagner [:TheOne] [use NI]]

(In reply to Andrew Williamson [:eviljeff] from comment #3)
> (In reply to Andreas Wagner [:TheOne] from comment #2)
> > Oh, I found some clones of this, although not all are affected (yet).
> > 
> > We should block also: [e-mail] versions 1.3 and higher
> 
> only 1.3 and higher?

For that particular add-on, yes.

Sorry for not including it in the first place.

Comment 5

[Andrew Williamson [:eviljeff]]

https://addons.mozilla.org/en-US/firefox/blocked/i1279 for [e-mail]

Comment 6

[Andreas Wagner [:TheOne] [use NI]]

Newly submitted clone: [e-mail]
Please block all versions.

Comment 7

[Jorge Villalobos [:jorgev] (he/him)]

(In reply to Andreas Wagner [:TheOne] from comment #6)
> Newly submitted clone: [e-mail]
> Please block all versions.

Blocked: https://addons.mozilla.org/en-US/firefox/blocked/i1414

Comment 8

[Andreas Wagner [:TheOne] [use NI]]

Another clone: {13ec6687-0b15-4f01-a5a0-7a891c18e4ee} . Please block all versions.

ref: https://addons.mozilla.org/en-US/editors/review/youtube-html5-viewer

Comment 9

[Andreas Wagner [:TheOne] [use NI]]

More clones:

[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
{501815af-725e-45be-b0f2-8f36f5617afc}
{9bdb5f1f-b1e1-4a75-be31-bdcaace20a99}
{e9d93e1d-792f-4f95-b738-7adb0e853b7b}

Please block all versions.

Comment 10

[Andrew Williamson [:eviljeff]]

modified https://addons.mozilla.org/en-US/admin/models/blocklist/blocklistdetail/1278/ for

[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]

and modified https://addons.mozilla.org/en-US/admin/models/blocklist/blocklistdetail/1414/ for
{13ec6687-0b15-4f01-a5a0-7a891c18e4ee}
[e-mail]
[e-mail]
[e-mail]
{501815af-725e-45be-b0f2-8f36f5617afc}
{9bdb5f1f-b1e1-4a75-be31-bdcaace20a99}
{e9d93e1d-792f-4f95-b738-7adb0e853b7b}
[e-mail]

jorge: can you verify my regexs are okay?

Comment 11

[Jorge Villalobos [:jorgev] (he/him)]

Couple of notes:
* Regexp blocks for IDs need to begin and end with `/`
* The second one ended with `^` instead of `$`

I fixed both of them, but otherwise look good.

Comment 12

[Andreas Wagner [:TheOne] [use NI]]

New clone: [e-mail]
This time using minified code.

Comment 13

[Andrew Williamson [:eviljeff]]

updated https://addons.mozilla.org/en-US/admin/models/blocklist/blocklistdetail/1278/

Comment 14

[Andreas Wagner [:TheOne] [use NI]]

Another clone: [e-mail]

Comment 15

[Andrew Williamson [:eviljeff]]

updated 
https://addons.mozilla.org/en-US/admin/models/blocklist/blocklistdetail/1278/
again