MozillaZine

[EXT] S3.Translator

Announce and Discuss the Latest Theme and Extension Releases.
ResinSiege
 
Posts: 1
Joined: December 14th, 2019, 11:35 pm

Post Posted December 14th, 2019, 11:38 pm

pag77 wrote:Hello!
A lot of time passed...
Someone posted on network "S3.Translator-Clone", and the moderators threw both (the clone and the original) into the blocklist.
Image

In order to avoid using the name “S3.Translator” for fraudulent purposes and distributing all kinds of malware under its guise, it will be like this:
I will sign all new versions in Mozilla and post updates through my website https://www.s3blog.org/s3gt.html
It will be automatically updated versions.
This means that once installing the extension from my site, it will automatically be updated when new versions are released.

So:
Original version for Firefox: This is a signed extension that will be automatically updated.
1. Download it: https://s3blog.org/download/s3gt/s3translator_firefox.xpi
2. Install s3translator_firefox.xpi


PS:
To transfer settings from the old version(blocklist) to the new one(s3translator_firefox.xpi), you can do this:
type in address bar: about: config
search: extensions.blocklist.enabled
set: false

after that, a blocked version of the extension will be available in your browser.

save the settings to a file: S3.Translator - Settings - Save Settings

enable blocklist again: extensions.blocklist.enabled = true

load the settings into the new S3.Translator: Settings - Load Settings



I created a profile just to say thank you! I heavily rely on s3 translator since I visit many Japanese sites, and the other translators just don't compare.

Elhem Enohpi
 
Posts: 40
Joined: March 19th, 2016, 8:49 am

Post Posted December 15th, 2019, 8:53 pm

I installed the new version 6.25 from the website. I clicked "No, I do not agree" to collection of statistics. But every time I click on a link, it tries to connect to stat.s3blog.org anyway. I don't want my browsing history tracked, how do I stop it? The old version 6.19 from Mozilla didn't do that.

Nuppi
New Member
 
Posts: 1
Joined: December 16th, 2019, 7:55 am

Post Posted December 16th, 2019, 9:21 am

Elhem Enohpi wrote:I installed the new version 6.25 from the website. I clicked "No, I do not agree" to collection of statistics. But every time I click on a link, it tries to connect to stat.s3blog.org anyway. I don't want my browsing history tracked, how do I stop it? The old version 6.19 from Mozilla didn't do that.


Hey,
I'm using Little Snitch program to block that data.

Taavi

GBinHoosick
 
Posts: 4
Joined: May 8th, 2014, 1:08 pm

Post Posted December 16th, 2019, 2:39 pm

Hello, Alexander.

I apologize for my cluelessness, as others are apparently not having difficulty, but I'm not succeeding in installing your workaround, or new, version of S3 Translator. I did download the s3translator_firefox.xpi installer, as you instructed. It then took a little effort to find an app that could open an xpi file (which I've never come across before), but I did eventually succeed in extracting the files to a folder titled "s3translator_firefox". That folder contains several subfolders and other files, but I can't find a file there that is the actual extension file that will open the Translator.

I also thought that perhaps once I'd extracted/installed the xpi file, the icon for the add-on would again appear next to the Firefox address bar along with all my other add-ons, as the "old" version did, but I don't see it there.

Would you please help me understand what I'm apparently doing wrong, and provide more explicit instructions that will allow me to again utilize your fantastic add-on?

I'm also wondering: Will you be doing whatever is necessary to appease the Firefox overlords, so they will unblock your add-on and it will then again be available for installation within addons.mozilla.org?

Thank you!!!!!

grahamperrin
 
Posts: 75
Joined: July 19th, 2009, 3:56 pm

Post Posted December 16th, 2019, 5:03 pm

GBinHoosick wrote:… whatever is necessary …


Essentially two things, as far as I can tell.

The first may be possible. Technically, the second may be impossible.

1. Attention to collection of ancillary user data

From https://bugzilla.mozilla.org/show_bug.cgi?id=1602293#c0 (with added emphasis)

"Note; This is clone version of original S3.Translator."

S3.Translator. was removed because it offer (optional) to send every visited URL to 3rd-party server. "Clone" does it too.


– and from https://bugzilla.mozilla.org/show_bug.cgi?id=1602293#c1:

… collecting ancillary user data against our policies.


Related: Data Disclosure, Collection and Management – Add-on Policies | Extension Workshop

2. Add-ons must be self-contained and not load remote code for execution

https://extensionworkshop.com/documenta ... -practices

grahamperrin
 
Posts: 75
Joined: July 19th, 2009, 3:56 pm

Post Posted December 16th, 2019, 11:45 pm

pag77 wrote:

1. …
2. Install s3translator_firefox.xpi



GBinHoosick wrote:… not succeeding in installing …


From https://support.mozilla.org/en-US/kb/fi ... ll-add-ons (with added emphasis):

For advanced users: You can also install add-ons from a file. If you saved the installer file to your computer, (for example, an .xpi … file) you can install the add-on using the gear icon ⚙ in the upper-right area of the Add-on Manager Extensions panel. Select Install Add-on from file... from the menu, then find and select the file.


Translations: https://support.mozilla.org/en-US/kb/fi ... anslations

GBinHoosick
 
Posts: 4
Joined: May 8th, 2014, 1:08 pm

Post Posted December 17th, 2019, 7:20 am

Thank you very much, grahamperrin! It was extremely kind of you to offer this great help, and of course it worked. The S3.Translator icon is back on the toolbar and appears to be fully functional. As always, it's "easy" once you know where to look for help, which you knew and I didn't. Seems I'm not as "advanced" a user as I think I am.

This is what the Internet should be about: no flame wars or Twitter battles, just people helping people. I know, I know, next I'll be suggesting we all hold hands and sing Kumbaya in perfect harmony. :wink:

Best holiday wishes to you, grahamperrin! And to add-on author Alexander, as well. Aw shucks, I might as well also include all mankind, and Tiny Tim especially. Shouldn't omit all plant-and-animal-kind either. I think that covers it. :wink:

tallguyyo
 
Posts: 6
Joined: November 24th, 2019, 10:56 pm

Post Posted December 18th, 2019, 5:08 am

pag77 wrote:Hello!
A lot of time passed...
Someone posted on network "S3.Translator-Clone", and the moderators threw both (the clone and the original) into the blocklist.
Image

In order to avoid using the name “S3.Translator” for fraudulent purposes and distributing all kinds of malware under its guise, it will be like this:
I will sign all new versions in Mozilla and post updates through my website https://www.s3blog.org/s3gt.html
It will be automatically updated versions.
This means that once installing the extension from my site, it will automatically be updated when new versions are released.

So:
Original version for Firefox: This is a signed extension that will be automatically updated.
1. Download it: https://s3blog.org/download/s3gt/s3translator_firefox.xpi
2. Install s3translator_firefox.xpi


PS:
To transfer settings from the old version(blocklist) to the new one(s3translator_firefox.xpi), you can do this:
type in address bar: about: config
search: extensions.blocklist.enabled
set: false

after that, a blocked version of the extension will be available in your browser.

save the settings to a file: S3.Translator - Settings - Save Settings

enable blocklist again: extensions.blocklist.enabled = true

load the settings into the new S3.Translator: Settings - Load Settings


please disable automatic update. sometimes I wish for things to work without auto update, if disable it through firefox will not prevent this then i'd rather use 6.25 or clone version.

grahamperrin
 
Posts: 75
Joined: July 19th, 2009, 3:56 pm

Post Posted December 18th, 2019, 9:32 pm

pag77 wrote:… I will sign all new versions in Mozilla and post updates through my website https://www.s3blog.org/s3gt.html


Unauthorised collection of statistics

Signed version 6.25 for Mozilla Firefox appears to collect statistics after the end user explicitly disables collection.

Respect the preferences of your customers; please fix this.

Screen recording: https://put.re/player/FyCD6637.mp4 | https://s.put.re/FyCD6637.mp4

Screen shot: https://s.put.re/Ccnh9nwY.png

Example data:

Code: Select all
(Status-Line)   HTTP/1.1 302 Found
Date   Thu, 19 Dec 2019 04:08:05 GMT
Server   Apache/2.2.15 (CentOS) mod_fcgid/2.3.9 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips
Location   https://istat.biz/api?key=5853ecc71178be9962ad851ff3626443c30cd53a&out=https%3A%2F%2Fwww.virustotal.com&uid=o256&format=txt
Cache-Control   max-age=25920000
Expires   Wed, 14 Oct 2020 04:08:05 GMT
Content-Length   0
Connection   close
Content-Type   text/plain; charset=UTF-8


https://chrome.google.com/webstore/deta ... nflopdohjk states:

… If user agree, then the extension may collect non-personalized browsing history. …


As far as I can tell:At a glance: the collection is non-personalised. However:

  • collection without agreement is troublesome
  • collection after explicit disagreement from the end user is entirely unacceptable.
Last edited by grahamperrin on February 17th, 2020, 12:15 am, edited 4 times in total.

grahamperrin
 
Posts: 75
Joined: July 19th, 2009, 3:56 pm

Post Posted December 20th, 2019, 11:13 am

Please, what's this?

Sent after I explicitly disagreed with collection of statistics:

Request headers and values

Code: Select all
(Request-Line)   POST /addon.html HTTP/1.1
Host   stat.s3blog.org
User-Agent   Mozilla/5.0 (X11; FreeBSD amd64; rv:56.0) Gecko/20100101 Firefox/56.0 Waterfox/56.3
Accept   */*
Accept-Language   en-GB,en-US;q=0.7,en;q=0.3
Accept-Encoding   gzip, deflate, br
Content-Type   application/x-www-form-urlencoded
Content-Length   78
Cookie   ses=2b27847da3b491d3d3ba8925402bf9d9; viewBlock_login_form=1; viewBlock_search=1; viewBlock_popular=1; viewBlock_development=1; viewBlock_intermix=1; viewBlock_personal=0; position_site_menu=right; viewBlock_user_panel=1; preview_default_height=113; googtrans=/ru/en
DNT   1
Connection   keep-alive


Response headers and values

Code: Select all
(Status-Line)   HTTP/1.1 200 OK
Date   Thu, 19 Dec 2019 07:53:15 GMT
Server   Apache/2.2.15 (CentOS) mod_fcgid/2.3.9 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips
Cache-Control   max-age=25920000
Expires   Wed, 14 Oct 2020 07:53:15 GMT
Vary   Accept-Encoding
Content-Encoding   gzip
Content-Length   20
Connection   close
Content-Type   text/plain; charset=UTF-8


https://s.put.re/afJ6oiCC.png

The traffic was observed soon after I visited a Firefox Account sign in page:

https://s.put.re/xr3x81Za.png
Last edited by grahamperrin on December 20th, 2019, 11:22 am, edited 1 time in total.

grahamperrin
 
Posts: 75
Joined: July 19th, 2009, 3:56 pm

Post Posted December 20th, 2019, 11:21 am

Geolocation

Broadly coinciding with unauthorised collection of statistics – the istat.biz stuff above – things such as this:

Request headers and values

Code: Select all
(Request-Line)   GET /api?key=5853ecc71178be9962ad851ff3626443c30cd53a&out=https%3A%2F%2Fblog.mozilla.org&uid=o256&format=txt HTTP/1.1
Host   istat.biz
User-Agent   Mozilla/5.0 (X11; FreeBSD amd64; rv:56.0) Gecko/20100101 Firefox/56.0 Waterfox/56.3
Accept   */*
Accept-Language   en-GB,en-US;q=0.7,en;q=0.3
Accept-Encoding   gzip, deflate, br
Content-Type   application/x-www-form-urlencoded
Cookie   __cfduid=d964e3dd5de7cd143321682ef87a37bbd1575120571; _la={redacted}; _lt={redacted}
DNT   1
Connection   keep-alive


Response headers and values

Code: Select all
(Status-Line)   HTTP/2.0 200 OK
date   Thu, 19 Dec 2019 07:53:04 GMT
content-type   text/plain; charset=utf-8
content-length   24
set-cookie   _la=1576741984
_lt=28381319314
referrer-policy   no-referrer
cf-cache-status   DYNAMIC
expect-ct   max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server   cloudflare
cf-ray   5477ccfaf813ce17-LHR
X-Firefox-Spdy   h2


– latitudes and longitudes.

DanRaisch
Moderator

User avatar
 
Posts: 123382
Joined: September 23rd, 2004, 8:57 pm
Location: Somewhere on the right coast

Post Posted December 20th, 2019, 2:40 pm

grahamperrin, if finding these issues are you running Firefox itself or Waterfox?

grahamperrin
 
Posts: 75
Joined: July 19th, 2009, 3:56 pm

Post Posted December 20th, 2019, 3:22 pm

DanRaisch wrote:… Firefox itself or Waterfox?


Waterfox.

HttpFox for analysis. If anyone knows of a suitable alternative for Firefox Quantum, please post under https://redd.it/edh0ex or viewtopic.php?t=635860 – thanks.

PS re: viewtopic.php?p=14852487#p14852487 above, for a future test I might use Google DNS (in lieu of Cloudflare 1.1.1.1).

Nuppi wrote:… Little Snitch …


Superb software – https://www.obdev.at/products/littlesnitch/index.html – but I no longer use a Mac.

pag77
 
Posts: 1640
Joined: December 26th, 2013, 10:46 pm

Post Posted December 21st, 2019, 3:07 am

hmm .. I completely turned off statistics collection in the original extension and sent it for review in AMO - after 7 minutes I got an absolute ban without the possibility of updating and without explaining reasons
Image

grahamperrin
 
Posts: 75
Joined: July 19th, 2009, 3:56 pm

Post Posted December 21st, 2019, 4:08 am

Oleksandr, thank you for responding to concerns from users.

I am not familiar with automated or manual review processes at Mozilla, will some guesswork help you?

pag77 wrote:… the original extension …


Your screenshot shows version 6.25.

For the different code, I guess that you must (at least) use a different version number.

Sorry. Maybe I misunderstood your screenshot.

I never published an extension, but I will look at the Add-on Developer Hub, try to understand.

Communicating with Mozilla about blocks

I sometimes see advice to use an e-mail address. Here, for example: https://bugzilla.mozilla.org/show_bug.cgi?id=1564395#c1

Return to Extension/Theme Releases


Who is online

Users browsing this forum: No registered users and 2 guests