Stylish, a browser extension with two million users, has been monitoring your browsing history for over a year.
外观时尚,具有200万用户的浏览器扩展,已经监视了您的浏览历史超过一年。
Stylish was once a great way to remove annoying features from websites—trending topics on Facebook, say, or that annoying bar that follows you as you scroll on Medium. To do this Stylish, the browser extension, needs access to every website you visit.
时尚曾经是从网站上删除烦人功能的一种好方法,例如,在Facebook上关注话题,或者在“中”上滚动时跟随您的烦人酒吧。 要做到这一点,浏览器扩展“时尚”需要访问您访问的每个网站。
Which is why SimilarWeb, an analytics company, purchashed Stylish in 2017. SimilarWeb had no interest in customizing websites; it only wanted access to a browser extension with extensive permissions—to add a little spyware and access all of that delicious data directly.
这就是为什么分析公司SameWeb在2017年收购Fashion的原因。SimilarWeb对自定义网站没有兴趣; 它只希望访问具有广泛权限的浏览器扩展-添加一些间谍软件并直接访问所有这些美味数据。
Here’s Robert Heaton, writing on his personal blog:
这是罗伯特·希顿(Robert Heaton)在他的个人博客上写道:
Unfortunately, since January 2017, Stylish has been augmented with bonus spyware that records every single website that I and its 2 million other users visit. Stylish sends our complete browsing activity back to its servers, together with a unique identifier. This allows it’s new owner, SimilarWeb, to connect all of an individual’s actions into a single profile. And for users like me who have created a Stylish account on userstyles.org, this unique identifier can easily be linked to a login cookie. This means that not only does SimilarWeb own a copy of our complete browsing histories, they also own enough other data to theoretically tie these histories to email addresses and real-world identities.
不幸的是,自2017年1月以来,Stylish已增加了奖励间谍软件,可记录我及其200万其他用户访问的每个网站。 时尚将我们完整的浏览活动以及唯一的标识符发送回其服务器。 这使它的新所有者SameWeb可以将一个人的所有动作连接到一个配置文件中。 对于像我这样在userstyles.org上创建了时尚帐户的用户,该唯一标识符可以轻松地链接到登录cookie。 这意味着,SimilarWeb不仅拥有我们完整的浏览历史记录的副本,而且还拥有足够的其他数据,从理论上将这些历史记录与电子邮件地址和真实世界的身份相关联。
Heaton goes on to show how this spyware works. It’s…extensive. We’ve been saying this for a long time: browser extensions are a privacy nightmare. You should check those you have installed right now and only keep the ones you absolutely depend on. Even then, maybe Google their names a little.
Heaton继续展示了该间谍软件的工作原理。 …范围广泛。 我们已经说了很长时间:浏览器扩展是隐私的噩梦。 您应该检查一下您现在安装的那些,只保留绝对依赖的那些。 即使那样,也许谷歌他们的名字也有点。
And seriously: uninstall Stylish. Now. We’ll do our part this week by updating our old articles and removing all links to the extension.
并认真:卸载时尚。 现在。 我们将在本周通过更新旧文章并删除指向该扩展程序的所有链接来尽自己的一份力量。