Author Topic: Mozilla blocks Firefox addons from Avast and AVG  (Read 1262 times)

Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 667
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Mozilla blocks Firefox addons from Avast and AVG
« on: December 03, 2019, 11:15:09 AM »
The Avast and AVG Firefox extensions are currently not listed in the Addons directory. They have apparently shared private information.

Mozilla has blocked Avast's browser extensions in its official directory. Anyone looking for "Avast Online Security" in the Addons catalog will receive "0 results". Also affected is the add-on "SafePrice". Both are also under the brand name AVG appeared and also no longer in the directory to find. The extensions seem to have sent the entire browsing history of users to an Avast server. Browser addons as data collector.

The reason for the blocking could have something to do with Vladimir Palant: The Adblock Plus founder had already written in detail in October 2018 that Avast extensions would send personal information to the server uib.ff.avast.com. This is not necessary for the functionality of the addons, criticized Palant. The transmitted information contained, among other things, the URL of the visited page, the page title and the referrer. Avast could therefore create an extensive user profile and reconstruct the exact surf history, warned Palant in his blog.

"The fact that Avast Online Security collects personally identifiable information from its users is not an oversight and is not necessary for its enhancement capabilities," Palant concludes. Avast declares in its privacy policy to pseudonymise and anonymise the collected "clickstream data". The data would be used for "cross-product direct marketing".

However, the affected browser extensions of Avast and AVG are not on the block list of Mozilla, writes GHacks. Therefore, they can still be used and installed. Users who have set up an Avast addon will not experience any restrictions. Mozilla had recently added a few entries to the list but did not include any Avast extensions. Mozilla would probably first negotiate with Avast, Palant suspects. But there is no official statement yet. The Avast and AVG addons are still listed in the Chrome directory at this time.

Avast again .....  :-TD >:(
« Last Edit: December 03, 2019, 11:29:12 AM by pio »
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline Born

  • Comodo Family Member
  • ***
  • Posts: 64
Re: Mozilla blocks Firefox addons from Avast and AVG
« Reply #1 on: December 03, 2019, 11:38:38 AM »
Avast has pretty much became scareware and malware with it spying on the user over the last few year's. Why I finally stopped using it or recommending it.

Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 667
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Mozilla blocks Firefox addons from Avast and AVG
« Reply #2 on: December 03, 2019, 11:46:28 AM »
Avast has pretty much became scareware and malware with it spying on the user over the last few year's. Why I finally stopped using it or recommending it.

I fully support that!  :-TU :P0l
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline Ploget

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 1791
  • 'Your best teacher is your last mistake'
    • Schneier on Security
Re: Mozilla blocks Firefox addons from Avast and AVG
« Reply #3 on: December 03, 2019, 12:13:25 PM »
Thanks Pio - a great informative summary
Ploget

All Win 10 x 64 Pro - 20H2 (19042.964) / CIS 12.2.2.8012
Comodo Forum Policy
“If you think you are too small to make a difference, try sleeping with a mosquito”

Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 667
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Mozilla blocks Firefox addons from Avast and AVG
« Reply #4 on: December 06, 2019, 09:14:43 AM »
Thanks Pio - a great informative summary

 :-TU  :azn:

Some further detailed information about what Avast has transferred for data.

- uri > The full address of the page you are on.
- title > Page title if available.
- referer > Address of the page that you got here from, if any.
- windowNum & tabNum >   Identifier of the window and tab that the page loaded into.
- initiating_user_action & windowEvent >   How exactly you got to the page, e.g. by entering the address directly, using a bookmark or clicking a link.
- visited > Whether you visited this page before.
- locale > Your country code, which seems to be guessed from the browser locale. This will be “US” for US English.
- userid > A unique user identifier generated by the extension (the one visible twice in the screenshot above, starting with “d916”). For some reason this one wasn’t set for me when Avast Antivirus was installed.
- plugin_guid > Seems to be another unique user identifier, the one starting with “ceda” in the screenshot above. Also not set for me when Avast Antivirus was installed.
- browserType & browserVersion > Type (e.g. Chrome or Firefox) and version number of your browser.
- os & osVersion > Your operating system and exact version number (the latter only known to the extension if Avast Antivirus is installed).

“But even if you didn’t install "Avast Online Security" yourself, it doesn’t mean that you aren’t affected. This isn’t obvious but "Avast """Secure""" Browser" has "Avast Online Security" installed by default. It is hidden from the extension listing and cannot be uninstalled by regular means, its functionality apparently considered an integral part of the browser.”

>>> https://palant.de/2019/10/28/avast-online-security-and-avast-secure-browser-are-spying-on-you/
« Last Edit: December 06, 2019, 09:17:25 AM by pio »
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline liosant

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 1520
  • GOD cure me epilepsy and atrophy - Sou brasileiro!
Re: Mozilla blocks Firefox addons from Avast and AVG
« Reply #5 on: December 07, 2019, 08:37:32 AM »
send data can collect logins, screenshot monitoring and collect wrong data...
This kind of monitoring can expose who saves login data, browsing history ... >:-D

Offline Born

  • Comodo Family Member
  • ***
  • Posts: 64
Re: Mozilla blocks Firefox addons from Avast and AVG
« Reply #6 on: December 07, 2019, 12:42:56 PM »
Was reading on their forums today and seen this.Kind of funny to think some really still trust having Avast on their pc.


Avast-Statement: We have offered our Avast Online Security and SafePrice browser extensions for many years through the Mozilla store. Mozilla has recently updated its store policy and we are liaising with them in order to make the necessary adjustments to our extensions to align with new requirements. The Avast Online Security extension is a security tool that protects users online, including from infected websites and phishing attacks. It is necessary for this service to collect the URL history to deliver its expected functionality. Avast does this without collecting or storing a user's identification.

We have already implemented some of Mozilla's new requirements and will release further updated versions that are fully compliant and transparent per the new requirements. These will be available as usual in the Mozilla store in the near future.



Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 667
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Mozilla blocks Firefox addons from Avast and AVG
« Reply #7 on: February 07, 2020, 03:11:21 PM »
***UPDATE***

Avast sells user data to Google, Microsoft and Pepsi

Report in german from Stefan Beiersmann , 28.01.20 >>> https://www.zdnet.de/88376351/bericht-avast-verkauft-daten-seiner-nutzer-an-google-microsoft-und-pepsi/?utm_source=rss&utm_medium=rss&utm_campaign=rss

"The security provider Avast allegedly practices a lively trade in the data of its users. Via a subsidiary called Jumpshot, the developer of free and paid anti-virus software is said to be able to sell very personal data that allows users to be tracked. According to an investigation by Motherboard and PCMag, companies such as Google, Yelp, Microsoft, Pepsi and Intuit are among the customers."

"The report is based on "leaked user data, contracts and other business documents". The Avast software should record data about searches on Google and Google Maps or visits to certain websites such as LinkedIn, YouTube and even porn sites. The data is then supposedly processed and, according to Jumpshot, provides insights into user behavior “behind the most valuable walled gardens on the Internet”.

"In my opinion, antivirus software providers that act as data brokers are no longer security companies," said Sam Curry, chief security officer of security provider Cybereason. "You should defend yourself with a clear, transparent language and remove conflicts of interest or, in my opinion, spyware that attracts customers with benefits that are misleading and frankly disgusting. Curry even goes so far as to make comparisons between Avast software and "possibly unwanted software" that collects and uses data in ways that users reject."

A message from Avast CEO Ondrej Vlcek:

>>> https://blog.avast.com/a-message-from-ceo-ondrej-vlcek?__cf_chl_jschl_tk__=70676583ce0ba170671cf3f55f96be0cfc6b31cd-1580389152-0-AaQeB9EMUFtM-7VErXXDUXETOLNxPpyslcRVolx0FJnd1q-OcmW4ELD2OmJ8IQByWeuVg0O8T1gppXz-1YqpRp7GuxDPr3lG-jqnHFXNBK8i86U-SGGc2a4ozI4QLzqfzojJdrbNV8C6wf91Q14dNF6QOEgzl3pa4OLBxWknn-4fQqOTxxKjfLYznHaffZrqyCe_oBZp_BhfEZG2iRkgc6hddsCgnmI8oyluk-ErIx702SEOGpx4IfKWKbky8FHeG5Q_81d-LQZ2XICUM81PPYBIXBlZcQDvbdOqZt8XyK733TQ31L0boOujI-JPO7Cq_ITD1o3fVtmh508cZb7OHhKePEh-Mnq-Ad5rW0HVKwGb  ??? :-TD :-TD :-TD
« Last Edit: February 07, 2020, 03:54:20 PM by pio »
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek