GitHub user claims Twitch has malware

Submitted ⁨⁨11⁩ ⁨months⁩ ago⁩ by ⁨Aatube@kbin.social⁩ to ⁨technology@lemmy.world⁩

https://github.com/uBlockOrigin/uAssets/assets/91396482/650e5013-af7d-403e-b6b0-2f1e64fc7eb2

https://github.com/uBlockOrigin/uAssets/issues/5184#issuecomment-1829172308

Twitch is a dangerous website, the extension probably won't be back. They could still easily target you at any time and you are just lucky they are sending ads. After some time of using the extension twitch will react and become even more toxic.

Twitch even has a network sniffer in its source code (among other things), its so much worse than just ads, some of these experiments are basically malware/pup that no-one would install on their device willingly, these instances aren't just left over code from some library they are deliberately crafted experiments that are present in the active code path.

source

Comments

Sort:hotnew top

testfactor@lemmy.world ⁨11⁩ ⁨months⁩ ago
Forgive me if I wait for more concrete evidence than the word of a guy who refuses to cite his sources because he thinks Twitch is in collusion with the US Government and he may be thrown in jail or disappeared for doing a write up on some publicly available source code.

source
orhtej2@eviltoast.org ⁨11⁩ ⁨months⁩ ago
The duck did I just read, some AI is attempting SEO or something?

What an absolute garbage statement devoid of any proof nor tbh technical possibility to implement.

source
- TORFdot0@lemmy.world ⁨11⁩ ⁨months⁩ ago
  based on the randomly inserted code block that isn’t even syntax-correct, to say nothing about how it doesn’t even make sense, seems to be a tell tale sign of either 1.) AI generated or 2.) schizophrenic generated
  
  source
  - Aatube@kbin.social ⁨11⁩ ⁨months⁩ ago
    hmm, which parts of it aren't syntax correct? see below, they made an extension before pulling it
    
    source
    -> View More Comments
- Aatube@kbin.social ⁨11⁩ ⁨months⁩ ago
  I doubt it’s just SEO… The fact that his first attempt at the comment was deleted by uBlock’s team and that he claims to be the developer of a now pulled Twitch adblock extension makes this interesting
  
  source
LWD@lemm.ee ⁨11⁩ ⁨months⁩ ago
[deleted]
source
- Aatube@kbin.social ⁨11⁩ ⁨months⁩ ago
  That is, they claim to be. While I don’t know much JavaScript, someone below claims it’s not valid JavaScript
  
  source
scottmeme@sh.itjust.works ⁨11⁩ ⁨months⁩ ago
Schizo post?

source
FishFace@lemmy.world ⁨11⁩ ⁨months⁩ ago

network sniffing

This is only worth paying attention to if someone can say how they not only escaped the browser sandbox but then called native, privileged code. Javascript running in the browser cannot just do that.

source
redditReallySucks@lemmy.dbzer0.com ⁨11⁩ ⁨months⁩ ago
If this was true, we would have much bigger problems than twitch. The dude determined twitch was spying on you based on function names (allegedly)

source
thelastknowngod@lemm.ee ⁨11⁩ ⁨months⁩ ago
This is what it feels like to interact with the Linux/opensource/selfhost people sometimes.

“bUt ThEy CaN wAtCh YoU!!1!”

source
- Prater@lemmy.world ⁨11⁩ ⁨months⁩ ago
  I mean they can watch and monitor your activity on their website, and are probably partnered with many other websites to collate data on your interests and beliefs to feed into a chunky advertising algorithm sooooo… But you didn’t want to hear that, did you?
  
  source
  - essteeyou@lemmy.world ⁨11⁩ ⁨months⁩ ago
    We all know that to a degree, but do you really think they’re in collusion with the US government to jail anyone who mentions it?
    
    I also don’t think the dude gave anywhere near enough information to explain why search engines and browsers should be blocking access to Twitch. They made a lot of claims, but no proof.
    
    source
    -> View More Comments
kpw@kbin.social ⁨11⁩ ⁨months⁩ ago
What network requests can it sniff? Shouldn't this be a browser security bug?

source
ubermeisters@lemmy.world ⁨11⁩ ⁨months⁩ ago
Okbuddy

source