961190 - addon stealing account info

Status: RESOLVED INVALID

(Toolkit :: Blocklist Policy Requests, defect)

Description

[Dave]

User Agent: Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.76 Safari/537.36

Steps to reproduce:

login to World of warcraft account


Actual results:

addon called cogshanks records account info and sends it to a database


Expected results:

no recording of site info or account info and no data being transmitted to remote sites.This addon is a serious privacy threat.

Comment 1

[Jorge Villalobos [:jorgev] (he/him)]

The description in the add-on page seems very clear about what it does: http://cogshanks.org/alt-o-magic/extension

Comment 2

[Dave]

(In reply to Jorge Villalobos [:jorgev] from comment #1)
> The description in the add-on page seems very clear about what it does:
> http://cogshanks.org/alt-o-magic/extension

Sorry, I 'm not a user of this addon.I do not have it installed.I am a concerned visitor of the pages it is used on.I am not a programmer, so I have no idea what info this thing records about me or why.The addon's website can , obviously, say anything it wants to about what the addon does.How am I to know if it is stealing my bank info from my account even though I don't run it on my computer?

Comment 3

[Jorge Villalobos [:jorgev] (he/him)]

The add-on can only affect those who have installed it. Add-ons require the same level of caution and trust that any software installed on your system should, since they can all potentially do the same to your data.