Hacker Newsnew | past | comments | ask | show | jobs | submit | mfrisbie's commentslogin


So this extension is feeding a stream of your browsing activity to a bunch of third party services? No thanks.


The same thing happens with Google's SafeBrowsing, Microsoft's SmartScreen, Bitdefender TrafficLight, or Emsisoft Browser Protection. Osprey essentially combines multiple already existing browser protection extensions into one.


SafeBrowsing uses local database AFAIK.


Ah! True. I guess they realized it would be better to do that than have the extra network strain.


I kept catching myself scrolling down their idiotic feed and wondering what the hell I was doing. Mindless dreck, all of it. Yet I still get cold inbound from it that turns into business, so I can't just abandon the platform entirely.

I wrote a ~50 LOC browser extension that always redirects away from the feed to your profile. Works great, sideload and forget.

https://github.com/classvsoftware/nofeeds


Nice. I use one in the chrome store called News Feed Eradicator. https://chromewebstore.google.com/detail/news-feed-eradicato...


Looks nice, but that extension is a high-value acquisition target for bad actors, and there's nothing but an email for contact information.

Sideloading eliminates this risk completely.


Dev of the mentioned extension here, I've been getting emails from bad actors offering to "buy" the extension for years. It really has made me far less trusting of browser extensions.

If I can be bothered replying, I tell them it's open source, they can just use the code for free. Eventually if I push them on it, they tell me they just want to acquire the users, and don't care about the extension. I wonder just how many extensions are compromised this way, it's a mess.


I run Track & Trace Tools[1], an extension directly targeted at the legal cannabis industry's main compliance platform Metrc.

Since it's targeted at businesses and not consumers, word of mouth has been powerful for me. I've rapidly grown in the state of Michigan thanks to a few very enthusiastic operators.

I also went on a slate of podcasts last year to talk about (read: promote) my product. Podcast hosts are always looking for guests, and most of them didn't cost me a thing.

It's also been helpful to be a Google Developer Expert for web extensions, the Chrome team interviewed me and that gave me a platform to talk about what I was working on[2].

[1] https://trackandtrace.tools

[2] https://youtu.be/8P-Sc8ZaViY?si=tLhx3LMIlNqHBvfB


> Podcast hosts are always looking for guests, and most of them didn't cost me a thing.

That implies that for some podcasts you can pay to be a guest?


Some charge a nominal fee, and one I had to travel to a studio to record. Made for a nice weekend in LA with my wife.


I tried very hard to find a way around using an external server, as I knew HN would harp on the related privacy issues. No luck.


I'll admit, the launch messaging could have been better.


For the record, this is bang on.


Creator here - you bet! It's a big problem.


Creator here. A check automatically runs every hour, and if there are any changes detected, a badge appears over the extension icon. I decided anything more than that was too invasive.


Indeed, periodic checks with a well-thought-out interval do make sense. Well done!


It would be much better to at least have the option to automatically disable an extension with changed ownership instead.

The majority of owner changes are going to be malicious, so the action taken should account for that.


Are extensions allowed to disable other extensions? That seems like it would be a poor design. If the feature was part of the browser, then sure, but not as an extension.


Creator here. It does self-detect (chrome.management.getAll() returns all installed extensions), but fair point.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: