Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NiM Chrome Extension is collecting user's email address #28184

Closed
eyedean opened this issue Jun 12, 2019 · 1 comment
Closed

NiM Chrome Extension is collecting user's email address #28184

eyedean opened this issue Jun 12, 2019 · 1 comment
Labels
duplicate Issues and PRs that are duplicates of other issues or PRs.

Comments

@eyedean
Copy link

eyedean commented Jun 12, 2019

NiM Chrome Extension is an option suggested by the Node team in https://nodejs.org/en/docs/guides/debugging-getting-started/

Per the following line of code in the source code of that extension, it collects user's email address and sends that (encrypted with the author's public key to his analytics server.
https://github.com/june07/NiM/blob/master/background.js#L151

Not only does it look suspicious, but probably a great portion of the users are not aware of that. In fact, it's for any debugging or general-tracking purpose of the developer, it could be a randomly generated UUID that gets sent, not the user's email address.

I wouldn't trust this extension and I think Node community should at least mention this in the official docs. (e.g. BTW, this extension is going to collect your email address and send that to the extension publisher.)

@joyeecheung joyeecheung added the duplicate Issues and PRs that are duplicates of other issues or PRs. label Jun 12, 2019
@joyeecheung
Copy link
Member

Duplicate of #28185

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
duplicate Issues and PRs that are duplicates of other issues or PRs.
Projects
None yet
Development

No branches or pull requests

2 participants