Popular browser extension "Stylish," used for customizing the appearance of webpages, was recently found to also be stealing all of your internet history. Software engineer Robert Heaton noticed the problem last week when he spotted a large number of requests going to api.userstyles.org. After decoding the data being sent out, he found that Stylish was exfiltrating all his browsing data.
Thanks to dgz for the story. dgz also reports that users of the extension have been getting a warning from Firefox and Chrome about the extension. Robert Heaton recommends if you like Stylish, try switching to an offshoot like "Stylus" which does the same thing without the spying.
SimilarWeb claims that they need to track every single website Stylish's users visit in order to recommend them styles for the current webpage. This is a solution in search of a flimsy justification. If this were all they were doing then they would only need to send themselves the current page’s domain, not the full URL. And it doesn’t even begin to explain why they also need to scrape and send themselves your actual Google search results from your browser window.
Thanks to dgz for the story. dgz also reports that users of the extension have been getting a warning from Firefox and Chrome about the extension. Robert Heaton recommends if you like Stylish, try switching to an offshoot like "Stylus" which does the same thing without the spying.
SimilarWeb claims that they need to track every single website Stylish's users visit in order to recommend them styles for the current webpage. This is a solution in search of a flimsy justification. If this were all they were doing then they would only need to send themselves the current page’s domain, not the full URL. And it doesn’t even begin to explain why they also need to scrape and send themselves your actual Google search results from your browser window.