thegreatsuspender icon indicating copy to clipboard operation
thegreatsuspender copied to clipboard

Malware?

Open alesim21 opened this issue 4 years ago • 53 comments

I just got the message from chrome that the extension contains malware, can you tell me if it is actually not safe?

alesim21 avatar Feb 04 '21 18:02 alesim21

Same here, looks like it's been removed from the chrome store as well

proxycase avatar Feb 04 '21 18:02 proxycase

https://github.com/greatsuspender/thegreatsuspender/issues/1263

proxycase avatar Feb 04 '21 18:02 proxycase

Chrome store pulled it, so now all Chrome/Edge users are being notified.

Nevexo avatar Feb 04 '21 18:02 Nevexo

I lost a large number of tabs I'd kept suspended, any way I can recover them?

arkyaC avatar Feb 04 '21 18:02 arkyaC

@arkyaC see #1263 for URL recovery help

Nevexo avatar Feb 04 '21 18:02 Nevexo

Yeah, though using it from HERE should be fine.

Cystax avatar Feb 04 '21 18:02 Cystax

Should be safe if you build it from the GitHub release, or if you're in Edge, just enable sleeping tabs.

Nevexo avatar Feb 04 '21 18:02 Nevexo

Ho appena ricevuto il messaggio da Chrome che l'estensione contiene malware, puoi dirmi se in realtà non è sicuro?

The problem for me is password and data theft, I own a website and if this extension is really harmful to me it would be a BIG PROBLEM

alesim21 avatar Feb 04 '21 18:02 alesim21

Dovrebbe essere sicuro se lo crei dalla versione GitHub o se sei in Edge, abilita semplicemente le schede dormienti.

Ho scaricato l'estensione dal Chrome Web Store

alesim21 avatar Feb 04 '21 18:02 alesim21

I know right?? What the hell is going on?

AlexDev404 avatar Feb 04 '21 18:02 AlexDev404

The extension was suddenly disabled and completely wiped from the Chrome Web Store

AlexDev404 avatar Feb 04 '21 18:02 AlexDev404

I've been using the extension for a long time now and I don't believe there is anything harmful in the code.. The problem comes for the change of ownership of the code (see more here : https://www.theregister.com/2021/01/07/great_suspender_malware/ )

u100009 avatar Feb 04 '21 18:02 u100009

The extension was suddenly disabled and completely wiped from the Chrome Web Store

There were changes made back in June by @deanoemcke who was covering his tracks, enabling new vulnerabilities through the extension. He has since been outed as he sold the software to a malicious hacking group who's been using the extension to push tracking software.

mike9k1 avatar Feb 04 '21 18:02 mike9k1

I called @deanoemcke out on this and he sicked his goons on me. "Well if you don't like it, don't use it" -- great

mike9k1 avatar Feb 04 '21 18:02 mike9k1

The big question is: how can we get the old (still known as good) version 7.1.6 installed instead of the 7.1.9 which is flagged 'harmful' now by Chrome ?

u100009 avatar Feb 04 '21 18:02 u100009

In https://github.com/greatsuspender/thegreatsuspender/issues/1147 I sounded the alarm on this and was IGNORED

mike9k1 avatar Feb 04 '21 18:02 mike9k1

omgggggggggggggggggggggggg,all my tabs dissapear!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!fkkkkkk

scarrrr316 avatar Feb 04 '21 18:02 scarrrr316

@scarrrr316 https://github.com/greatsuspender/thegreatsuspender/issues/1263#issuecomment-773514532

prgTW avatar Feb 04 '21 18:02 prgTW

i downloaded the release ,verson 7.1.6 ,can use but all my tabs disappeared

scarrrr316 avatar Feb 04 '21 18:02 scarrrr316

@scarrrr316 #1263 (comment)

ohhhhhhhhhhhhhhhhhhhhhh thxxxxxxxxxxxxxxxxxx i found most of the tabs in session buddy(saved 2 days ago , and i can find others tabs from the link you sent ,thxxxxxxxxxx

scarrrr316 avatar Feb 04 '21 18:02 scarrrr316

@scarrrr316 You can

  1. install https://chrome.google.com/webstore/detail/the-marvellous-suspender/noogafoofpebimajpfpamcfhoaifemoa
  2. search Your history https://github.com/greatsuspender/thegreatsuspender/issues/1263#issuecomment-773514532
  3. change klbibkeccnjlkjkiokjodocebajanakg to noogafoofpebimajpfpamcfhoaifemoa in all tab URLs to ~use~ switch to the new extension

prgTW avatar Feb 04 '21 18:02 prgTW

hahaha the Marvelous Suspender lol

AlexDev404 avatar Feb 04 '21 18:02 AlexDev404

i installed TGS v7.1.6

scarrrr316 avatar Feb 04 '21 18:02 scarrrr316

How to recover lost tabs with The Great Suspender
The extension comes with its own tab history management UI to help users recover from lost tabs. Go to the extension options page (from 'settings' in the popup or 'options' when right-clicking on the extension). Then in the settings sidebar click on 'Session management'. This will show you your most recent tab sessions. You can click on each session to see more detail on the individual windows and tabs it contains.

To reload a session, simply click the 'reload' link. This will reload all windows and tabs in an 'unsuspended' state. If your session contains a very large number of tabs, then you might instead want to click 'resuspend' which will be much faster as it reloads the tabs in a suspended state.

If for some reason the missing tabs are not in your recent sessions, then please follow the guide below for recovering lost tabs without using The Great Suspender.

If you have access to system backups, you may be able to restore old 'recent sessions' from these backups. The recent sessions are stored in an IndexedDB database at Chrome/Default/IndexedDB/chrome-extension_klbibkeccnjlkjkiokjodocebajanakg_0.indexeddb.blob/ and Chrome/Default/IndexedDB/chrome-extension_klbibkeccnjlkjkiokjodocebajanakg_0.indexeddb.leveldb/

do you guys know where are

Chrome/Default/IndexedDB/chrome-extension_klbibkeccnjlkjkiokjodocebajanakg_0.indexeddb.blob/ and Chrome/Default/IndexedDB/chrome-extension_klbibkeccnjlkjkiokjodocebajanakg_0.indexeddb.leveldb/

scarrrr316 avatar Feb 04 '21 18:02 scarrrr316

Simply clicking the back button on pages that were suspended brought them back for me.

DefinitelyNotFred avatar Feb 04 '21 18:02 DefinitelyNotFred

Screw this new owner. Why would they do such stuff.

AlexDev404 avatar Feb 04 '21 18:02 AlexDev404

Screw this new owner. Why would they do such stuff.

@deanoemcke and others have been integrating a closed-source library that tracks user information going all the way back to May of last year -- https://github.com/greatsuspender/thegreatsuspender/issues/1147

I am hearing rumblings that the developer is being paid by a third party to integrate a closed-source library that tracks user data in the latest release, hence the intrusive "UPDATE NOW" push. I'll be removing this extension post-haste.

mike9k1 avatar Feb 04 '21 19:02 mike9k1

So just to check, the alternative options of this is to either roll back to a version something last year or to migrate over to a fork of this called The Marvelous Suspender which is barely known? Man, this sucks since this was an amazing extension for me and my hoarder behavior.

greenking13 avatar Feb 04 '21 19:02 greenking13

So are you basically saying that everytime I update data gets pushed to a third party?

AlexDev404 avatar Feb 04 '21 19:02 AlexDev404

There a forked branch version 7.1.10 of TGS here : https://github.com/aciidic/thegreatsuspender-notrack with no tracking enabled.. I just downloaded and installed it.. happy camper again.

PS: this is the beauty of GitHub source code.. everyone can contribute to its own version and get it reviewed by peers.

u100009 avatar Feb 04 '21 19:02 u100009