[EXT] S3.Translator

Announce and Discuss the Latest Theme and Extension Releases.
Post Reply
ResinSiege
Posts: 1
Joined: December 14th, 2019, 11:35 pm

Re: [EXT] S3.Translator

Post by ResinSiege »

pag77 wrote:Hello!
A lot of time passed...
Someone posted on network "S3.Translator-Clone", and the moderators threw both (the clone and the original) into the blocklist.
Image

In order to avoid using the name “S3.Translator” for fraudulent purposes and distributing all kinds of malware under its guise, it will be like this:
I will sign all new versions in Mozilla and post updates through my website https://www.s3blog.org/s3gt.html
It will be automatically updated versions.
This means that once installing the extension from my site, it will automatically be updated when new versions are released.

So:
Original version for Firefox: This is a signed extension that will be automatically updated.
1. Download it: https://s3blog.org/download/s3gt/s3tran ... irefox.xpi
2. Install s3translator_firefox.xpi


PS:
To transfer settings from the old version(blocklist) to the new one(s3translator_firefox.xpi), you can do this:
type in address bar: about: config
search: extensions.blocklist.enabled
set: false

after that, a blocked version of the extension will be available in your browser.

save the settings to a file: S3.Translator - Settings - Save Settings

enable blocklist again: extensions.blocklist.enabled = true

load the settings into the new S3.Translator: Settings - Load Settings

I created a profile just to say thank you! I heavily rely on s3 translator since I visit many Japanese sites, and the other translators just don't compare.
Elhem Enohpi
Posts: 49
Joined: March 19th, 2016, 8:49 am

Re: [EXT] S3.Translator

Post by Elhem Enohpi »

I installed the new version 6.25 from the website. I clicked "No, I do not agree" to collection of statistics. But every time I click on a link, it tries to connect to stat.s3blog.org anyway. I don't want my browsing history tracked, how do I stop it? The old version 6.19 from Mozilla didn't do that.
Nuppi
New Member
Posts: 1
Joined: December 16th, 2019, 7:55 am

Re: [EXT] S3.Translator

Post by Nuppi »

Elhem Enohpi wrote:I installed the new version 6.25 from the website. I clicked "No, I do not agree" to collection of statistics. But every time I click on a link, it tries to connect to stat.s3blog.org anyway. I don't want my browsing history tracked, how do I stop it? The old version 6.19 from Mozilla didn't do that.
Hey,
I'm using Little Snitch program to block that data.

Taavi
GBinHoosick
Posts: 9
Joined: May 8th, 2014, 1:08 pm

Re: [EXT] S3.Translator

Post by GBinHoosick »

Hello, Alexander.

I apologize for my cluelessness, as others are apparently not having difficulty, but I'm not succeeding in installing your workaround, or new, version of S3 Translator. I did download the s3translator_firefox.xpi installer, as you instructed. It then took a little effort to find an app that could open an xpi file (which I've never come across before), but I did eventually succeed in extracting the files to a folder titled "s3translator_firefox". That folder contains several subfolders and other files, but I can't find a file there that is the actual extension file that will open the Translator.

I also thought that perhaps once I'd extracted/installed the xpi file, the icon for the add-on would again appear next to the Firefox address bar along with all my other add-ons, as the "old" version did, but I don't see it there.

Would you please help me understand what I'm apparently doing wrong, and provide more explicit instructions that will allow me to again utilize your fantastic add-on?

I'm also wondering: Will you be doing whatever is necessary to appease the Firefox overlords, so they will unblock your add-on and it will then again be available for installation within addons.mozilla.org?

Thank you!!!!!
grahamperrin
Posts: 82
Joined: July 19th, 2009, 3:56 pm

Adherence to Mozilla Add-on Policies

Post by grahamperrin »

GBinHoosick wrote:… whatever is necessary …
Essentially two things, as far as I can tell.

The first may be possible. Technically, the second may be impossible.

1. Attention to collection of ancillary user data

From https://bugzilla.mozilla.org/show_bug.cgi?id=1602293#c0 (with added emphasis)
"Note; This is clone version of original S3.Translator."

S3.Translator. was removed because it offer (optional) to send every visited URL to 3rd-party server. "Clone" does it too.
– and from https://bugzilla.mozilla.org/show_bug.cgi?id=1602293#c1:
… collecting ancillary user data against our policies.
Related: Data Disclosure, Collection and Management – Add-on Policies | Extension Workshop

2. Add-ons must be self-contained and not load remote code for execution

https://extensionworkshop.com/documenta ... -practices
grahamperrin
Posts: 82
Joined: July 19th, 2009, 3:56 pm

Firefox: installing an add-on from a file

Post by grahamperrin »

pag77 wrote:

1. …
2. Install s3translator_firefox.xpi

GBinHoosick wrote:… not succeeding in installing …
From https://support.mozilla.org/en-US/kb/fi ... ll-add-ons (with added emphasis):
For advanced users: You can also install add-ons from a file. If you saved the installer file to your computer, (for example, an .xpi … file) you can install the add-on using the gear icon ⚙ in the upper-right area of the Add-on Manager Extensions panel. Select Install Add-on from file... from the menu, then find and select the file.
Translations: https://support.mozilla.org/en-US/kb/fi ... anslations
GBinHoosick
Posts: 9
Joined: May 8th, 2014, 1:08 pm

Re: [EXT] S3.Translator

Post by GBinHoosick »

Thank you very much, grahamperrin! It was extremely kind of you to offer this great help, and of course it worked. The S3.Translator icon is back on the toolbar and appears to be fully functional. As always, it's "easy" once you know where to look for help, which you knew and I didn't. Seems I'm not as "advanced" a user as I think I am.

This is what the Internet should be about: no flame wars or Twitter battles, just people helping people. I know, I know, next I'll be suggesting we all hold hands and sing Kumbaya in perfect harmony. :wink:

Best holiday wishes to you, grahamperrin! And to add-on author Alexander, as well. Aw shucks, I might as well also include all mankind, and Tiny Tim especially. Shouldn't omit all plant-and-animal-kind either. I think that covers it. :wink:
tallguyyo
Posts: 6
Joined: November 24th, 2019, 10:56 pm

Re: [EXT] S3.Translator

Post by tallguyyo »

pag77 wrote:Hello!
A lot of time passed...
Someone posted on network "S3.Translator-Clone", and the moderators threw both (the clone and the original) into the blocklist.
Image

In order to avoid using the name “S3.Translator” for fraudulent purposes and distributing all kinds of malware under its guise, it will be like this:
I will sign all new versions in Mozilla and post updates through my website https://www.s3blog.org/s3gt.html
It will be automatically updated versions.
This means that once installing the extension from my site, it will automatically be updated when new versions are released.

So:
Original version for Firefox: This is a signed extension that will be automatically updated.
1. Download it: https://s3blog.org/download/s3gt/s3tran ... irefox.xpi
2. Install s3translator_firefox.xpi


PS:
To transfer settings from the old version(blocklist) to the new one(s3translator_firefox.xpi), you can do this:
type in address bar: about: config
search: extensions.blocklist.enabled
set: false

after that, a blocked version of the extension will be available in your browser.

save the settings to a file: S3.Translator - Settings - Save Settings

enable blocklist again: extensions.blocklist.enabled = true

load the settings into the new S3.Translator: Settings - Load Settings
please disable automatic update. sometimes I wish for things to work without auto update, if disable it through firefox will not prevent this then i'd rather use 6.25 or clone version.
grahamperrin
Posts: 82
Joined: July 19th, 2009, 3:56 pm

Unauthorised collection of statistics

Post by grahamperrin »

pag77 wrote:… I will sign all new versions in Mozilla and post updates through my website https://www.s3blog.org/s3gt.html
Unauthorised collection of statistics

Signed version 6.25 for Mozilla Firefox appears to collect statistics after the end user explicitly disables collection.

Respect the preferences of your customers; please fix this.

Screen recording: https://put.re/player/FyCD6637.mp4 | https://s.put.re/FyCD6637.mp4

Screen shot: https://s.put.re/Ccnh9nwY.png

Example data:

Code: Select all

(Status-Line)	HTTP/1.1 302 Found
Date	Thu, 19 Dec 2019 04:08:05 GMT
Server	Apache/2.2.15 (CentOS) mod_fcgid/2.3.9 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips
Location	https://istat.biz/api?key=5853ecc71178be9962ad851ff3626443c30cd53a&out=https%3A%2F%2Fwww.virustotal.com&uid=o256&format=txt
Cache-Control	max-age=25920000
Expires	Wed, 14 Oct 2020 04:08:05 GMT
Content-Length	0
Connection	close
Content-Type	text/plain; charset=UTF-8
https://chrome.google.com/webstore/deta ... nflopdohjk states:
… If user agree, then the extension may collect non-personalized browsing history. …
As far as I can tell:At a glance: the collection is non-personalised. However:
  • collection without agreement is troublesome
  • collection after explicit disagreement from the end user is entirely unacceptable.
Last edited by grahamperrin on February 17th, 2020, 12:15 am, edited 4 times in total.
grahamperrin
Posts: 82
Joined: July 19th, 2009, 3:56 pm

Re: [EXT] S3.Translator

Post by grahamperrin »

Please, what's this?

Sent after I explicitly disagreed with collection of statistics:

Request headers and values

Code: Select all

(Request-Line)	POST /addon.html HTTP/1.1
Host	stat.s3blog.org
User-Agent	Mozilla/5.0 (X11; FreeBSD amd64; rv:56.0) Gecko/20100101 Firefox/56.0 Waterfox/56.3
Accept	*/*
Accept-Language	en-GB,en-US;q=0.7,en;q=0.3
Accept-Encoding	gzip, deflate, br
Content-Type	application/x-www-form-urlencoded
Content-Length	78
Cookie	ses=2b27847da3b491d3d3ba8925402bf9d9; viewBlock_login_form=1; viewBlock_search=1; viewBlock_popular=1; viewBlock_development=1; viewBlock_intermix=1; viewBlock_personal=0; position_site_menu=right; viewBlock_user_panel=1; preview_default_height=113; googtrans=/ru/en
DNT	1
Connection	keep-alive
Response headers and values

Code: Select all

(Status-Line)	HTTP/1.1 200 OK
Date	Thu, 19 Dec 2019 07:53:15 GMT
Server	Apache/2.2.15 (CentOS) mod_fcgid/2.3.9 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips
Cache-Control	max-age=25920000
Expires	Wed, 14 Oct 2020 07:53:15 GMT
Vary	Accept-Encoding
Content-Encoding	gzip
Content-Length	20
Connection	close
Content-Type	text/plain; charset=UTF-8
https://s.put.re/afJ6oiCC.png

The traffic was observed soon after I visited a Firefox Account sign in page:

https://s.put.re/xr3x81Za.png
Last edited by grahamperrin on December 20th, 2019, 11:22 am, edited 1 time in total.
grahamperrin
Posts: 82
Joined: July 19th, 2009, 3:56 pm

Coincidental collection of geolocation information

Post by grahamperrin »

Geolocation

Broadly coinciding with unauthorised collection of statistics – the istat.biz stuff above – things such as this:

Request headers and values

Code: Select all

(Request-Line)	GET /api?key=5853ecc71178be9962ad851ff3626443c30cd53a&out=https%3A%2F%2Fblog.mozilla.org&uid=o256&format=txt HTTP/1.1
Host	istat.biz
User-Agent	Mozilla/5.0 (X11; FreeBSD amd64; rv:56.0) Gecko/20100101 Firefox/56.0 Waterfox/56.3
Accept	*/*
Accept-Language	en-GB,en-US;q=0.7,en;q=0.3
Accept-Encoding	gzip, deflate, br
Content-Type	application/x-www-form-urlencoded
Cookie	__cfduid=d964e3dd5de7cd143321682ef87a37bbd1575120571; _la={redacted}; _lt={redacted}
DNT	1
Connection	keep-alive
Response headers and values

Code: Select all

(Status-Line)	HTTP/2.0 200 OK
date	Thu, 19 Dec 2019 07:53:04 GMT
content-type	text/plain; charset=utf-8
content-length	24
set-cookie	_la=1576741984
_lt=28381319314
referrer-policy	no-referrer
cf-cache-status	DYNAMIC
expect-ct	max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server	cloudflare
cf-ray	5477ccfaf813ce17-LHR
X-Firefox-Spdy	h2
– latitudes and longitudes.
User avatar
DanRaisch
Moderator
Posts: 127185
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Re: [EXT] S3.Translator

Post by DanRaisch »

grahamperrin, if finding these issues are you running Firefox itself or Waterfox?
grahamperrin
Posts: 82
Joined: July 19th, 2009, 3:56 pm

Analysis

Post by grahamperrin »

DanRaisch wrote:… Firefox itself or Waterfox?
Waterfox.

HttpFox for analysis. If anyone knows of a suitable alternative for Firefox Quantum, please post under https://redd.it/edh0ex or http://forums.mozillazine.org/viewtopic.php?t=635860 – thanks.

PS re: http://forums.mozillazine.org/viewtopic ... #p14852487 above, for a future test I might use Google DNS (in lieu of Cloudflare 1.1.1.1).
Nuppi wrote:… Little Snitch …
Superb software – https://www.obdev.at/products/littlesnitch/index.html – but I no longer use a Mac.
pag77
Posts: 1642
Joined: December 26th, 2013, 10:46 pm

Re: [EXT] S3.Translator

Post by pag77 »

hmm .. I completely turned off statistics collection in the original extension and sent it for review in AMO - after 7 minutes I got an absolute ban without the possibility of updating and without explaining reasons
Image
grahamperrin
Posts: 82
Joined: July 19th, 2009, 3:56 pm

Re: [EXT] S3.Translator

Post by grahamperrin »

Oleksandr, thank you for responding to concerns from users.

I am not familiar with automated or manual review processes at Mozilla, will some guesswork help you?
pag77 wrote:… the original extension …
Your screenshot shows version 6.25.

For the different code, I guess that you must (at least) use a different version number.

Sorry. Maybe I misunderstood your screenshot.

I never published an extension, but I will look at the Add-on Developer Hub, try to understand.

Communicating with Mozilla about blocks

I sometimes see advice to use an e-mail address. Here, for example: https://bugzilla.mozilla.org/show_bug.cgi?id=1564395#c1
Post Reply