Armin Sebastian https://armin.dev/ Recent content on Armin Sebastian Hugo -- gohugo.io en-us This work is licensed under the Creative Commons Attribution 4.0 International License. Thu, 01 Aug 2019 00:00:00 +0000 Google and Mozilla are failing to support browser extension developers https://armin.dev/blog/2019/08/supporting-browser-extension-developers/ Thu, 01 Aug 2019 00:00:00 +0000 https://armin.dev/blog/2019/08/supporting-browser-extension-developers/ It is a regular occurrence to hear about open source developers selling their browser extensions, only for their users to be exploited later on by the new owners. Purchase offers for browser extensions usually range between $0.1 and $0.3 per user, depending on factors such as the geographical distribution of users, and monetization offers are also frequent. Accepting such an offer may significantly improve one&rsquo;s life, and it can be potentially life-changing. Adblock Plus filter lists may execute arbitrary code in web pages https://armin.dev/blog/2019/04/adblock-plus-code-injection/ Mon, 15 Apr 2019 00:00:00 +0000 https://armin.dev/blog/2019/04/adblock-plus-code-injection/ A new version of Adblock Plus was released on July 17, 2018. Version 3.2 introduced a new filter option for rewriting requests. A day later AdBlock followed suit and released support for the new filter option. uBlock, being owned by AdBlock, also implemented the feature. Under certain conditions the $rewrite filter option enables the publishers of these extensions and the maintainers of filter lists to inject arbitrary code in web pages. Firefox extensions cannot securely clear browsing data https://armin.dev/blog/2019/03/firefox-extensions-browsing-data-security/ Sun, 10 Mar 2019 00:00:00 +0000 https://armin.dev/blog/2019/03/firefox-extensions-browsing-data-security/ <p>While I was working on <a href="https://github.com/dessant/clear-browsing-data">Clear Browsing Data</a> I have learned about several browser bugs that may render some Firefox extensions that focus on user privacy unreliable.</p>