• 1 Post
  • 923 Comments
Joined 1 year ago
cake
Cake day: July 26th, 2024

help-circle
  • A big problem in the whole third party extension world (for browsers and apps like these) is that the creators of these extensions are often swayed to sell their creation. Dropping an infostealer to 1000 people could easily get you 10s of thousands of dollars if you use the stolen info for stuff like bank fraud. So invest a few thousand of that to buy the extension and you get a profit. You can even get access to the accounts of extension creators by getting them infected by other extensions. This can even be automated in the form of a worm such as the NPM malware named Shai-Hulud.

    It’s an extremely dirty battle that requires every developer to be vigilant about who they trust and to defend their creation at all costs. Easy money always has a bad side, and I hope every developer understands that their users have put a trust into them that the developer has most likely also put into other developers.










  • If you use Mullvad you get a token instead of an account. It’s not linked to any email address. You can then pay directly to this token using crypto. You can even send cash in an envelope. If you use Tor to get a token and pay, you’re as private as can be.

    The thing however is that VPN providers can always see what IP address is using their service. So however private your account and payment is, in the end you always have to trust the provider that they are not logging IPs.

    If you are buying from Mozilla, then both Mozilla and Mullvad have access to information. This means that buying from a reseller is less private by default.