cross-posted from: https://piefed.world/c/tech/p/1400813/popular-twitch-ad-blocker-caught-sending-live-account-credentials-to-russian-proxies

Threat Research Team identified a cross-store browser extension, “Twitch Enhanced Viewer | JeetBot,” that forwards each user’s live Twitch OAuth session token to proxy servers operated by a Russian commercial bot service. The extension ships on both the Chrome Web Store (extension ID pnhhdhhcadcjfckjhpmjneldiegbojfb, 30,000 users) and Firefox Add-ons (twitchenhancedviewer@example.com, 552 users). Both listings are live at time of writing.

    • Nugscree@lemmy.world
      link
      fedilink
      English
      arrow-up
      9
      ·
      3 hours ago

      For Twitch it does, they inline the video ads with the stream, uBlock can’t do anything about that, and if you have a blocker that does work Twitch just infinitely refreshes the stream trying to force the video ad.

      • kuiskaaja@lemmy.ml
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 hour ago

        i mean it only blocks like 80-90% of twitch ads so people sometimes use other adblockers for twitch alongside ublock

        however the twitch adblockers never really worked for me, broke playback all the time so i never use them

    • [object Object]@lemmy.ca
      link
      fedilink
      English
      arrow-up
      1
      ·
      13 minutes ago

      Realistically those oath tokens get sold to scrapers and bots. The suspicious activity goes on your account and you can get an account ban

      (don’t know if that bans you from Amazon, but if we were all banned from Amazon, that would be better for the world).

  • DeathsEmbrace@lemmy.world
    link
    fedilink
    English
    arrow-up
    12
    ·
    21 hours ago

    There is a script you can find that autoblocks twitch ads if you set it up properly. It’s popular but, I forgot it, it uses Ublock origin.

  • pulsewidth@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    3
    ·
    22 hours ago

    Just wanted to say that’s a great little pixel art graphic for the story. I’m confident it’s not ai, because i like it.

    • M137@lemmy.today
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      3
      ·
      22 hours ago

      Sorry but I really think it’s AI. The only time I played around with AI of any kind was to see how it’d handle pixelart and it looked very similar to this. It’s good at a very quick glance but quickly falls apart (like a lot of AI things) as soon as you actually look at it.

      I don’t see how a human could mess it up that oddly and badly. It would take more effort to make it this bad than just make actual pixel art, there are so many small things that make no sense as errors or sloppy/lazy human art.

      • pulsewidth@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        4 hours ago

        What’s wrong and bad about it, in your opinion? I’m no pixel art expert, but it sounds like you may be?

        • OccasionallyFeralya@lemmy.ml
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 hours ago

          I can’t speak to the pixel are but the website itself also looks ai generated (as in the design not necessarily the writing). Also its homepage advertises its services as ai powered.

    • yamper@piefed.social
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      22 hours ago

      it doesnt really adhere to any pixel grid. to be fair many pixel artists also dont adhere to a grid, but ai REALLY doesnt.