tl;dr Add-on developer ansh sold out the extension to new owners. Commited updates 1.8.8 to the Mozilla repository, but nothing on GitHub containing the malware. The malware was a custom implementation of the mellowtel scraper mentioned in the arstechnica article. It had the opt-in functionality disabled and other “bugs” which caused excessive bandwidth usage. Please be aware there is no independent verification whether not more possible harm was caused than the mentioned mellowtel scraping.

By jiffyreader, the from the github link provided:

"Hey all,

Sorry for the delay in answering here. I was waiting for the dust to settle a little bit before clearing things up.

I tried to explain the timeline and sequence of actions in the last messages. Many of you want to know the reasons behind them.

I saw that developers were earning a lot from turning their products into proxies for scraping and were being paid by proxy providers like anyIP or brightdata. Usually they pay more for mobile proxies. So I decided to try a similar idea. I saw that Jiffy Reader had already tried with mellowtel but had stopped after a while. I thought I could monetize it by making a custom integration and bought the plugin. I tried the open source version of mellowtel but changed the code in order to make it native (refer to the Single Purpose policy issue above) and removed some of the limits in the library. In the process I introduced bugs and caused issues to a lot of you which triggered the malware report. The reason why these bugs were not immediately clear and I couldn’t solve them is because they showed up based on some specific requests/websites (google search or pdf download, etc.) and device conditions (pdf viewer open/scrolling a tab with videos) which I didn’t have a way to replicate and solve.

As I remarked before, the plugin didn’t steal any cookies/credit cards/password or personal data and you can check the network output logs or any VPN logs to confirm. You are still free to change passwords/auth sessions but JiffyReader didn’t collect or leak any of this personal information.

Ideally, I wanted to keep the product running/improving it and using this forked version for monetization without affecting users negatively. But in my eagerness to have the version accepted by the review team I changed the code to not display the opt-in and out page immediately and that removed a lot of user control. And I think I introduced some bugs (but from an arstechnica article that @concernedcitizen2 has also linked it looks like the original library had some issues on its own, so it could also be due to that).

For GDPR, I haven’t collected any data from this bandwidth sharing monetization (including IPs which I don’t store). The privacy policy on the website refers to google analytics, to the Crisp web chat and to any contact information the user might pass to us. The public pages that were scraped didn’t have to do anything with the websites a user might be visiting. The same goes for Meucci.js which just monitored xhr/ajax requests INSIDE the session-less frame, not outside, so again it didn’t revolve around any user data. You can look at the mellowtel library since I used a lot of that code

Sorry for the issues and concerns I’ve caused with these actions.

I will be committing all changes to this repo and removing all the flawed forked code. I will also send a new version for the same to FireFox, Edge and Chrome again. Going forward, I will always keep the open-source version in sync with the submitted version.

If anyone wants to reach out, you can do at jiffyreader007@gmail.com. I feel like it’s not good to keep this discussion on this repo and I’ve created a separate Discord in the meanwhile: https://discord.gg/cjwS8vmR3R

I’m really sorry for this and having removed a useful plugins that so many people used. Thanks for your understanding."

Here is the full list of extensions: https://docs.google.com/spreadsheets/u/0/d/e/2PACX-1vT1XgBs25gRlg5e3nYCAff967WMtZZTO-TB3rR9zszaJpTpCVFg8j7FkBxnHb3tw3aHGjKBGSxYyLgV/pubhtml?pli=1

deleted by creator

The Deep Fake Detector probably can’t keep up anymore with the recent AI advances.

That is probably true, but doesn’t mean much when gaming is such a mainstream activity.

tl;dr

"The grass has been cut as short as possible, and loose, dried grass has been removed from affected areas.

“Prior to tomorrow’s sessions, the grass will be dampened, and specific response teams will be stationed around the track.”

This is on-topic, because it happened at Microsoft’s event.

https://lemmy.world/post/27740032/16212983

For orientation you could use much subtler ways. There are models which look like a dumpster of random colors. For these it absolutely is only about cost savings, and I grew up from a time building 1300+ pcs models as a kid when Lego didn’t even have the colors for “orientation” and never had an issue. There are enough methods for orientation which don’t require using screaming lime and azure colors. There are enough shades of grey for that.

Lego’s tolerances are pretty good, and so are a couple of other non-counterfeit brands. They might be a bit “stickier”. Lego as an overall product is behind. The prices are not just high, rather borderline questionable. Color consistency is notoriously poor with certain colors, due to cost saving measures. They stopped using colored granulated plastics, and instead inject ink.

They charge premium licensing prices and deliver stickers while Cobi is able to print it properly. Cobi is pricey mind you, but they at least deliver. Lego has no proper lighting, which opened the market for Fun Whole. They butchered and killed their robotics line up of Mindstorns. Lego butchered their Technic electronics with compatibility breakage and forced app usage. Lego abuses the that brand to keep selling model cars with few functions. Lego abused the Technic brand to publish a Mars Rover which has a design failing suspension and zero chassis stability.

For cost savings, they fill the invisible insides with random colored blocks, drowning alternate uses.

Their product photos are misleading, with photoshopped headlights which don’t exist and other trickery.

Lego has likely a way too big catalogue, sells perhaps not enough of most, and goes quantity over quality.

The truth is, there are very well designed sets, with prints, no random colors, at acceptably high prices and they are adorable. And I would and maybe will purchase them and have done so not long ago. It’s the amount of crap which comes out. I often assume the Internet scandalizes Lego’s state, and of course they do, but when I walk past my local Lego shops, I see terrible designs, at ridiculous prices.

If Lego would position themselves as a mainstream brand at medium prices, nobody would bat an eye. It’s them often surcharging 50% above competition at lower quality which grinds people’s gears really badly.

HQ Lego Alternatives:

Military, aircraft, small cars: Cobi. Technic: CaDa has licensed premium lines like the AMG GT One . Models with Lighting: Fun Whole, but can near Lego pricing, with higher quality. Kids: Buy used Lego sets, don’t bother too much with lost parts, replace them on Bricklink.

And there is a few others. I listed only companies not ripping off duplicates. There is more good ones, and of course a lot of copycat companies.

Might be, because it affects threads only on their server, but it doesn’t happen with the web interface.

Unfortunately comments don’t load anymore with Sync. Sad to see no barebones maintenance on this software.

I can vouch for Humankind too. It offers quite some depth and variability despite some stupid balancing here and there. Beware though it can often feel unfair and broken due to a hidden steep learning curve, as faith and influence are your core diplomatic strength, and the emphasis on territories when the game shoves cities in the main UI focus. Underneath its game design is largely quite good.

The dbzer0 thing is not because of simple drama, but because lemmy mirrors contents onto the server itself. To not become liable for piracy, they blocked the instance, because it was linking pirate content. Even on reddit you were never allowed to post that.

I hope a driver makes the public statement “Women are allowed to drive”, then slams 10 000€ on the table, and excuses for stating something which doesn’t align with FIA’s neutrality rules.

The boss blind ability trigger joker for money.

Low blow for a struggling competitor. I would endorse aggressive marketing against monopoly holders, but Firefox isn’t it.

I especially fail to see the value to drive up obsolescence. Look how the Final Fantasy XIV art team, or the Tyranny RPG expressed so much through comparatively ancient engines of the PS3 era. And for shooters we have so much visual polished fidelity, with physics, high resolution textures and dynamic lighting to create anything you want. From “Prey” (2016) to Prey (2005) I think both look amazing.

At least have it for a few minutes running the way the pump is at the bottom with some acrobatics.