扩展ShowIP会泄露用户的浏览历史

A Firefox add-on that gives users the ability to collect information on the IP address, server hostname and other related data for websites they visit also has the added bonus feature of reporting the same information on every site visited to a third-party server, SophosLabs reports. The ShowIP add-on exposes the full Web-browsing history of its users to the add-on's back-end service—and anyone who can intercept the unencrypted packets.

Sophos' Graham Cluely writes that he was alerted to the problem by a reader, who found a recent update to the ShowIP add-on sends the full URL of sites visited in unencrypted form—including those visited using HTTP Secure and in "private browsing" mode—to a Web server at api.ip2info.org, without alerting the user. The behavior is a potential privacy threat to users of the service, because the data leaked by the add-on could be used by anyone sharing the network they are on to reconstruct their Internet browsing history.

The issue has been reported on the add-on's Google Code project page, but there has been no response.

大体是说这个扩展会把用户所有浏览过的网址以未加密的形式上传到第三方服务器上.

原文地址
http://arstechnica.com/business/news/20 ... mments-bar

应该是查询网页的地址吧？

审核人员失责。

还好用的是厉害的超人的showlocation，放心！

show location 应该没问题吧？
一般比较流行的是 show location 或 flagfox，虽然showIP这名字好像很熟悉，但我没用过好像。

一直用Show Location,后来在Mozest下了个脚本版。

OMG,偶以前用这个，这个扩展作者的道德有问题   。建议本论坛开个置顶贴，专门报有后面的扩展，避免大伙上当   。

mygames10：OMG,偶以前用这个，这个扩展作者的道德有问题   。建议本论坛开个置顶贴，专门报有后面的扩展，避免大伙上当   。回到原帖

十分的赞同

超人的showlocation