750761 - Privacy concerns over popular ShowIP Firefox add-on

Status: RESOLVED WONTFIX

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Tom S [:evilpie]]

Apparently this bug is leaking private sensitive history information. As per http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/.

A lot of user at https://addons.mozilla.org/en-US/firefox/addon/showip/reviews/ already call it 'Spyware'

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

We have approached the developer and will come up with a solution together. I don't think we're going to block for this.

Comment 2

[Andre Klapper]

Jorge: Will the solution be communicated here? This gets quite some bad press, e.g. on Germany's biggest IT news page at http://heise.de/-1564896
I'd prefer to move this to the component "Add-On security" and reopen until properly fixed - similar to how you handle for example bug 750119.

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

The solution is that the developer will release an update that fixes this problem. We might post something in the add-ons blog once the issue is resolved, but this isn't a Mozilla bug and we don't track these issues on Bugzilla.