this post was submitted on 29 Apr 2026
384 points (98.0% liked)

Technology

84222 readers
3924 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
 
  • A network of 24 media extensions that are installed on 800,000 users and collected viewing data and demographic information on major streaming platforms such as Netflix, Hulu, Disney+, Amazon Prime Video, HBO, Apple TV, and others
  • 12 separate ad blockers with a combined install base of over 5.5 million users openly selling user data
  • Nearly 50 other extensions, with over 100,000 users in aggregate, that collected and resold users’ browsing data
all 46 comments
sorted by: hot top controversial new old
[–] Miller@lemmy.world 1 points 1 hour ago

Is it really news that tech and associated companies say the security of their users is important to them while grossly violating that principle.

[–] Lux@lemmy.blahaj.zone 9 points 10 hours ago

thought the thumbnail was MF DOOM for a sec

[–] bitjunkie@lemmy.world 29 points 15 hours ago (2 children)

If you're still using Chrome in 2026, you get what you get.

[–] forkDestroyer@infosec.pub 14 points 10 hours ago (1 children)

I'm sure the extensions on other browsers are doing the same thing, to be fair.

The chrome web store is also used across other chromium browsers like Vivaldi, right?

[–] SaharaMaleikuhm@feddit.org 5 points 9 hours ago

Chromium forks are just as bad. Reap what you sow.

[–] Crozekiel@lemmy.zip 8 points 13 hours ago (2 children)

And then there is my company IT department wanting to forcibly uninstall anything that isn't chrome because "chrome is the only secure option". They literally made our company tools that are browser based just not work with anything that isn't chrome to curb people trying to use other browsers. :(

[–] Fiery@lemmy.dbzer0.com 1 points 1 hour ago

There's an extension for firefox based browsers that masquerades your browser as chrome.

[–] Bazoogle@lemmy.world 2 points 10 hours ago (1 children)

Tbf, the problem was extensions here. Which if they have those blocked as well this wouldn't be a problem.

[–] Crozekiel@lemmy.zip 5 points 10 hours ago

Lol, they don't. We have some of the worst IT people... Most of our computers are still on Windows 10 and just haven't been getting updates because they didn't setup extended update support properly.

[–] sirico@feddit.uk 5 points 11 hours ago* (last edited 11 hours ago)

Just use the eff ones if they're ever in this position we're done

[–] _haha_oh_wow_@piefed.social 119 points 19 hours ago (6 children)

Nobody should still be using Chrome after they killed proper ad blocking. The browser is a legitimate security threat.

[–] Arklese1zure@lemmy.zip 3 points 4 hours ago

It's kinda sad, seeing how far it has fallen. Chrome was an absolute beast of a browser back in the Windows 7 days.

[–] reksas@sopuli.xyz 10 points 16 hours ago (1 children)

when i uninstalled chrome long time ago, i immidiately noticed that my pc performance improved. it slows down your computer even if its not on

[–] badgermurphy@lemmy.world 2 points 4 hours ago

I bet it really was on! A lot of Windows programs install companion apps that aren't highly visible, but run in the background all the time to do things like load up some of the main program's libraries to make the app seem to start faster when you run it, as well as check for updates on its own, phone home about whatever they want, and watch to make sure it is the default application vs any competing apps on the system with similar functionality, etc.

Note that a lot of that functionality is of little too no benefit to the user, but the app is shamelessly using the user's stuff without really asking, including sometimes to the point where it makes your computer run worse.

[–] lemmyng@lemmy.world 9 points 18 hours ago (2 children)

They killed uBlock Origin. Fortunately uBlock Origin Lite has been working with Cromite, but I'm holding onto my Ungoogled Chromium install with full uBlock Origin till my dying breath.

[–] grue@lemmy.world 19 points 17 hours ago (1 children)

But why do you love helping Google control web standards, when you could just be using a Mozilla-based browser instead?

[–] lemmyng@lemmy.world 3 points 15 hours ago (1 children)

Now hold up there, pardner! I didn't mention that I also use IronFox and LibreWolf/Mullvad! And honestly, Cromite has been crashing on me so much that I've switched my primary browser to IronFox.

[–] Zoot@reddthat.com 4 points 15 hours ago

Could they stop fucking with ironfox though please, for the love of god stop changing the UI on me. I just want a browser that stays the same and works for years, my habits are consistently wrecked with each passing update

[–] Scotty_Trees@lemmy.world 3 points 14 hours ago (2 children)

i have morons still saying they use chrome because of it's profiles. you can't unfix the stupid, there's too much of it.

[–] badgermurphy@lemmy.world 2 points 4 hours ago

But... tons of browsers have that.

[–] Bazoogle@lemmy.world 4 points 10 hours ago

I use firefox because of its containers

[–] gapa@feddit.nu 3 points 16 hours ago (1 children)

I use chromium for some sites since i have written an extension that gives me dark mode for all sites. And firefox demands that all extensions have to be signed.

[–] notastatist@feddit.org 4 points 16 hours ago (2 children)

There are darkmode extensions for firefox. Or do you like to use your own?

[–] gapa@feddit.nu 4 points 15 hours ago (1 children)

Yeah. I try to keep the number of regular extensions low for security and privacy reasons.

[–] x00z@lemmy.world 2 points 9 hours ago

You can probably port it to a userscript without much trouble, and then you can use it in every browser using a single extension/addon along with other userscripts (which you can easily read the source code and disable auto updates of). I use Violentmonkey and have written a few scripts. Development and usage is easier than extensions/addons for personal stuff.

Personally I just use Dark Reader though.

[–] Fyurion@sh.itjust.works 1 points 15 hours ago

Dark Reader works great, I've used it for years on firefox

[–] fxdave@lemmy.ml 2 points 18 hours ago

Nobody should use any browsers other than servo. But it's not ready yet 🤷‍♂️

[–] Exeous@lemmy.world 61 points 20 hours ago* (last edited 20 hours ago) (1 children)

The largest extensions in the network: 

• Custom Profile Picture for Netflix (200K users)

• Hulu Ad Skipper (100K)

• Netflix Picture in Picture (100K)

• Ad Skipper for Prime Video (60K)

• Netflix Extended (60K)

• Stands AdBlocker (3M users) sells browsing data to third parties for “market analytics purposes.”

•	Poper Blocker (2M users) discloses selling identifiers, browsing activity, behavioral profiles, and inferred sensitive data – including health conditions, religious beliefs, and sexual orientation, all inferred from the URLs you visit.

•	All Block, an ad blocker for YouTube (500K users), sells anonymized data “for analytical and commercial purposes.” Published by an entity called Curly Doggo Limited, based in London.

•	TwiBlocker (80K users) discloses transferring browsing data to third parties who “process or sell it for analytical purposes.”

•	Urban AdBlocker (10K users) routes browsing data and AI conversations through the BiScience data broker.

•	Career.io Job Auto Apply (10K users) states in its policy that it may use personal data collected from your resume to sell to third parties, including data brokers, for targeted advertising and profiling. A job application tool that sells your resume.

•	Dog Cuties (6K users) is a cute dog wallpaper new-tab extension. Confirmed data seller through the Apex Media network.

•	EmailOnDeck (10K users) is a temporary email service – a tool people use specifically when they don’t want to share their real information. Its policy states it may sell, rent, or share its mailing list.

•	Survey Junkie discloses selling URLs visited, clickstream data, and “modeled information” about consumer preferences to market research agencies, ad agencies, and data analytics providers.

• Dashy New Tab (10K users) has its Chrome Web Store listing marked “does not sell your data.” Its actual privacy policy marks data as “Sold or Shared: Yes.” We believe this is CCPA compliance language for standard analytics, not commercial data sales – which is why we left it out. But the contradiction between the store listing and the privacy policy is real. If a publisher’s own policy says “Sold or Shared: Yes” and the store listing says the opposite, which one should users trust?

[–] XLE@piefed.social 4 points 11 hours ago

I can at least understand the ad skippers. But a custom profile picture having double the users?

[–] Jiral@lemmy.org 12 points 15 hours ago* (last edited 15 hours ago) (2 children)

In the US maybe, I doubt this is legal in the EU. It is most definitely illegal with sensitive data like health data.

[–] x00z@lemmy.world 1 points 9 hours ago

In the EU you must give explicit consent.

[–] freddo@lemmy.zip 1 points 10 hours ago (2 children)

I doubt they care about EU laws.

[–] x00z@lemmy.world 1 points 9 hours ago

Then the EU can force Google to remove or disable them for EU users.

[–] Jiral@lemmy.org 1 points 10 hours ago* (last edited 10 hours ago) (1 children)

You'd be surprised. When fines are commonly in the billions, they start to care as a matter of fact. At least proper companies do. Criminals with scam businesses are a different story of course.

[–] cookiecoookie@lemmy.world 0 points 9 hours ago

Not many proper companies in America, at least none of the large ones

[–] DahGangalang@infosec.pub 57 points 20 hours ago

Props to the article for listing some of the extensions.

Sure do wish they'd list all that they investigated and publish as a "sells data / doesn't sell data"

[–] spicehoarder@lemmy.zip 9 points 15 hours ago

It's the evolution of shareware.

[–] Dyskolos@lemmy.zip 32 points 20 hours ago (1 children)

As if chrome users would give a fuck. I mean, they use chrome and probably all else that is google.

[–] magnue@lemmy.world 9 points 19 hours ago (3 children)
[–] XLE@piefed.social 15 points 17 hours ago* (last edited 16 hours ago)

People who aren't experts in privacy and web browsing.

1.6 million people installed this ad blocker that claims to be open-source, but has no published source code.

Is it malware? Probably not.

Is it worth installing? Hell no.

Oh, and it's a Firefox extension.

[–] BigJohnnyHines@lemmy.ca 7 points 16 hours ago* (last edited 16 hours ago)

There are a LOT of people out there who honestly have no idea that a website is capable of collecting data. Maybe even the majority. The fact these numbers are not higher is due to most people sticking with defaults rather than them making a privacy decision.

[–] spicehoarder@lemmy.zip 1 points 15 hours ago
[–] Scotty_Trees@lemmy.world 1 points 14 hours ago

ohhhhh nooooooo this is soooooo horrible /s