Rated 1 out of 5 stars

Huge privacy leak
http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

This review is for a previous version of the add-on (1.0.1-signed). 

update

hi and thanks for your info.
In order to show data like provider, country, city the plugin needs to get this data from api since it is not available within the browser itself. We are adding https asap, in the meantime you can either use an older version (published here) or deactivate the infos in the settings..

Rated 1 out of 5 stars

SPYWARE ALERT! STOP USING THIS ADD-ON!
Further details;
http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

This review is for a previous version of the add-on (1.0.1-signed). 

api accesses

hi and thanks for sending that link. we read that article and will add https support asap. the api requests are needed to get the geo information about the remote site, like country, city, ect.

This feature was added to provide more information within the pluginbar, not only the ip.

DANGER - Do not install it Rated 1 out of 5 stars

> Firefox "security" add-on exposes users' Web browsing history
> http://arstechnica.com/business/news/2012/05/firefox-security-add-in-exposes-users-web-browsing-history.ars
>
> The ShowIP add-on exposes the full Web-browsing history of its users to the add-on's back-end service—and anyone who can intercept the unencrypted packets.

This review is for a previous version of the add-on (1.0.1-signed). 

unencrypted

Hi ekbworldwide, thanks a lot the issue has been adressed and encryption (https) will be added asap. in the meanwhile the version of the plugin is downgraded.

How long does it take Mozilla to pull this? Rated 1 out of 5 stars

Come on Mozilla don't you read the news? This should have been pulled until it was checked out after the first reports came out. it's not like you have to create a patch or anything.

This review is for a previous version of the add-on (1.0.1-signed). 

already reacted

hi, mozilla changed the version to an older one. so they are pretty fast :)

SPYWARE BEWARE Rated 1 out of 5 stars

Be careful if you decide to use this add-on!

This review is for a previous version of the add-on (1.0.1-signed). 

Rated 1 out of 5 stars

Spyware Addon verschickt eine Liste der besuchten Seiten an eine bestimmte Adresse. Berichtet auch http://stadt-bremerhaven.de/firefox-sicherheits-erweiterung-verraet-eure-seitenbesuche-aufgepasst/

This review is for a previous version of the add-on (1.0.1-signed). 

funktion

Hi yλy, danke frü Deinen Hinweis. Das Plugin requestet Daten von unserer IP2Location Datenbank um die neuen Funktionen wir Provider-Anzeige, Land ect. zur Verfügung stellen zu können. Persönliche Daten werden dabei keine gespeichert. Leider sind solche Infos nur über kommerzielle Datenbanken zu bekommen und deshalb braucht es einen externen Request.

Rated 1 out of 5 stars

As mentioned earlier, this addOn violates the policies and is a security concern:
http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

This review is for a previous version of the add-on (1.0.1-signed). 

policies

Hi Paddy, thanks for your rating and for adressing your concerns.
The plugin gets the data from our server to access the ip2location database.
We added this feature to improve the plugin value and the benefits for the
users to go towards services like flagfox which are very popular.
As far as I know we have a privacy policy that says that no personal
information is stored - since it is not.
I will add an detailed description in the next days as well.
Date like Provider and Country is only available through a external Database.

Furthermore you can deactivate the requests by going in the plugin settings and remove the
"request remote information" checkboxes.

Rated 1 out of 5 stars

This add-on leaks your browsing history to third party websites. Read more on the issue here

http://arstechnica.com/business/news/2012/05/firefox-security-add-in-exposes-users-web-browsing-history.ars

This review is for a previous version of the add-on (1.0.1-signed). 

Rated 1 out of 5 stars

Reported for breaking add-on policies:

"What the add-on's description doesn't say is that since version 1.3 (released on April 19th 2012) it has also sent - unencrypted - the full URL of sites visited using HTTPS, and sites viewed in Private Browsing mode, to a site called ip2info.org.

The user never realises that the data has been shared with a third-party, unless they use special tools to monitor what data is being sent from their computer.

SophosLabs researcher Xiaochuan Zhang examined the add-on, and observed the potential privacy breach in action. In the following example, he used Wireshark to view the network packets being sent and observed his request to visit a non-existent website "www.thisisapparentlyafakeservice.me" being shared with ip2info.org.

The full URL of every webpage visited is sent to the Germany-based ip2info.org website, using unencrypted connections.

In addition, the add-on has no warning that sites you visit might be disclosed, no privacy policy small print explaining its behaviour, and no apparent way to opt-out of the data-sharing."

http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

This review is for a previous version of the add-on (1.4). 

https

hi pingpong, we will add https the next days, thanks for your info. the data is requested to get the provider and country data. no personal data is stored. you can deactivate the requests in the plugin settings...

Spyware Rated 1 out of 5 stars

http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

This add-on sends your browsing history to third parties, and additionally serves as a security risk by sending its data unecrypted. Avoid it.

This review is for a previous version of the add-on (1.4). 

https

Hi, thanks for your comment. https will be added asap to encrypt the database requests.

Do not use until privacy/security issues are addressed Rated 1 out of 5 stars

Definitely stay away from this add-on. It transmits your entire browsing history (unencrypted too!) to the developer: http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

This review is for a previous version of the add-on (1.4). 

https and history

hi jaquer, thanks for your message. we use the requests to get data from the ip2location database. no personal data is stored. https will be added asap. you can deactivate the requests in the settings.

Security risk Rated 1 out of 5 stars

This addon is itself a security risk, now that it's reporting every website you visit to a German link-marketing company secretly.

http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

Best avoided.

This review is for a previous version of the add-on (1.4). 

Watch Out Rated 1 out of 5 stars

Sends your browsing history to third-party servers

http://nakedsecurity.sophos.com/2012/05/01/privacy-concern-showip-firefox-add-on/

This review is for a previous version of the add-on (1.4). 

Firefox 12 :-( Rated 5 out of 5 stars

does also not work with FF12 as with FF11
and no the versions on googlecode are also completly outdated and will not work in FF11/FF12 packages of Fedora (x86_64)

This review is for a previous version of the add-on (1.3).  This user has a previous review of this add-on.

Unnecessary requests Rated 3 out of 5 stars

This plugin makes requests for data, even in the context of such add-ons as "speed dial" and "live http headers".
_http://api.ip2info.org/getdata/?loc=chrome%3A%2F%2Fspeeddial%2Fcontent%2Fspeeddial.xul&b=f&p=s&v=1.3
Why do these requests?
Why cookies on domain .0lpe.de?

This review is for a previous version of the add-on (1.3). 

Rated 5 out of 5 stars

Thanks for this Addon, it works great!

PS: I use the more current versions from your google repository.

This review is for a previous version of the add-on (1.0.1-signed). 

Help Rated 1 out of 5 stars

I am trying to install this add-on to my Mozilla browser but it seems that it won't work. Always connection failed but there is a connection though I'm not so sure if it fast enough to allow me to download this add-on. But i can play videos in youtube and download musics from musicaddict.com.

This review is for a previous version of the add-on (1.0.1-signed). 

Problem with "Extended Status Bar" :/ Rated 4 out of 5 stars

Very good extension, but it is unable to run with Extended Status Bar 1.5.8 addon in Firefox 8.01 using 1.2rc4 version.

This review is for a previous version of the add-on (1.0.1-signed). 

Rated 5 out of 5 stars

No puede faltar en mi navegador !!!
Gracias.

This review is for a previous version of the add-on (1.0.1-signed). 

Rated 5 out of 5 stars

8.0 下有问题,虽然不会被禁用,但是不显示ip地址信息。

This review is for a previous version of the add-on (1.0.1-signed).