📜 ⬆️ ⬇️

Suspicious xoopit plugin for Firefox

Last week, installed the Xoopit plugin for Firefox.
This plugin complements / modifies the gmail interface. It makes easy navigation through all attached files in letters and so on.
After installation, he asked for a username and password, of course I entered them: (.
His performance was lame and worked with him for an hour and deleted it in the standard way in firefox.


And then everything would be nothing, but today, going to your gmail account, and as many already know, google below writes from what IP they came in last time, I saw an IP address, which is clearly not mine. Checked with geotool . It turned out to be xoopit.com. So I found out who is using IMAP to check my mail.

The question is simple and concise. What for? Why check my mail after I deleted the plugin?
')
The question of how to cure it for a long time did not stand, changing the password, and for greater confidence from another browser.

It's funny that today there was a hot discussion of the Gmail Backup utility in the " Gmail Backup " topic, where I talked about the high probability of a drop in the local storage media along with the backup, than Google’s failure. To which the habrop users rightly argued in favor of backups (they took away the password, locked the box, and so on). And today, life has hinted that I may be mistaken in my statement.

Update: Thanks to the Hub user, the mikes found the answer, which lay in front of everyone who installed the Xoopit plugin, in privacy policy .

The Xoopit plugin can be used for the Xoopit Service.

When signing up for the Xoopit service, you will be asked for your Gmail username and password. Xoopit needs your information in Gmail. Xoopit works or other mail clients connecting to Gmail, such as your desktop mail program or cell phone.

We are intently focused on protecting your privacy. It helps you to ensure your data remains private.

Find out more at www.xoopit.com/privacy-and-security

So Habrapas, and those who are not, will be more attentive in the future. But then it turns out I wrote a topic about “which are not good developers and which suspicious Xoopit plugin”, Hab users have commented and most of them supported me too. Not good at it. It’s not good either that the developers do not control the process of removing the plug-in from the browser (or just say that they visit our site and delete the account, this is in case you have two or more browsers with this plugin) and at the same time delete the account from their site (after breakfast :) I'll go and try to remove it, but yesterday their website didn’t even let me down :(, before the topic was published, so there’s no offense about insults :))

Many thanks to all the users who participated in the discussion and raising karma :)

Source: https://habr.com/ru/post/44297/


All Articles