"As a follow-up, we're now extending this pause to all our monetization features, including YouTube Premium, Channel Memberships, Super Chat and Merchandise, for viewers in Russia," YouTube said in a statement on Thursday. Google and YouTube had earlier stopped selling online advertising in Russia following similar pauses by Twitter Inc (TWTR.N) and Snap Inc (SNAP.N) after Moscow's invasion of Ukraine. This is in addition to the company's recent suspension of ads in Russia. Google will also pause ads for advertisers based in Russia across its properties and networks globally, the company said. Don’t set yourself up to be surprised with a potential security issue down the road.March 10 (Reuters) - Alphabet Inc's (GOOGL.O) YouTube and Google Play store are suspending all payment-based services in Russia, including subscriptions, as Western sanctions start to pose banking challenges in the country. If nobody reports it - or if you’re not scanning the news for updates on your many browser addons - you’ll never know. The mysterious way the whole situation was handled by the extension’s new maintainer - and their complete silence on this matter ( and everything else recently) - makes me a bit nervous that a similar situation could happen again.
#YOUTUBE TAB SUSPENDER ISSUE CODE#
The good news? The offending code appears to have been removed from The Great Suspender, but that doesn’t necessarily mean you should keep using it. The fact that the code is not obvious malware is meaningless in light of the fact that it can be changed without notice, and that it is minified (human-unreadable).” The fact that disabling tracking still works is irrelevant given the fact that most of the 2 million users of this extension have no idea that that option even exists. Using the chrome web store version of this extension, without disabling tracking, will execute code from an untrusted third-party on your computer, with the power to modify any and all websites that you see. While there does exist an innocent explanation for this, I can no longer say that it is the most likely. Most importantly, the minified javascript differs significantly from that distributed by the OWA project.” However, the site contains no real information other than the tracking scripts, and is only found in the context of this extension. That site is one month old, and is clearly designed to appear innocent, being hosted on a public webhost, and being given a seemingly innocent homepage from the CentOS project. Those are hosted on the unrelated site, which turns out to be immensely suspicious. Although OpenWebAnalytics is a real software, it does not provide the files executed by the extension. “On November 6th, discovered a smoking gun that the new maintainer is malicious. This change was supposedly in order to enable new screenshot functionality, but that was unclear.” “That lets the extension do what it pleases, including inserting ads, blocking sites, forcible redirects….
As Github’s TheMageKing wrote in November of last year:
The extension suddenly started asking for new permissions as well, like an all-encompassing ability to mess with your browser’s web requests.
Here’s the longer story: The Great Suspender has a new maintainer (formerly Dean Oemcke), and this unknown entity dropped a few silent updates to new builds of the extension allowing it to connect to various third-party servers and execute code.
0 kommentar(er)
