Critiques pour Substital
Substital par Gaëtan Covelli
Avis de KGBEER
Noté 1 sur 5
par KGBEER, il y a 2 ansInteresting enough this addon is promoted as the following.
=====================
FEATURES:
...
- Substital is passive by default and won't inject anything in the pages you visit. Only YOU decide when to add subtitles to a video.
=======================
Developer says, "it WON'T INJECT ANYTHING in the pages you visit"
but here he states the EXACTLY OPPOSiTE twice.
https://addons.mozilla.org/en-US/firefox/addon/substital/reviews/1779383/
https://addons.mozilla.org/en-US/firefox/addon/substital/reviews/1728241/
He says,
.......No, Substital cannot work with only the activeTab permission. The reasons is that WE INJECT ELEMENTS IN THE PAGE that need broader permissions to be able to work, like for example the area where users can search for subtitles.
FIREFOX ADDON STAFF also states the following.
==================
This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing.
===================
And the developer wriote the following.
Hey! No creepy stuff under the hood :) Substital for Firefox was manually reviewed multiple times by persons from the Mozilla Firefox Add-ons team. It's a pre-requisite to be published here in the store. If there would be creepy stuff under the hood, it would not be published.
To anyone who understand just a little bit of technology it is clear that this addon may had many changes in his code since its publishing which may or may not include any unwilling code behind.
Currently it's given permissions to access any page opened or maybe stored in your browser, not just the tab with the video opened.
Not forgetting the contracdition in developers words of not injecting anything in the page(as stated above it may include any page in your browser)
So be careful if you want to use it.
=====================
FEATURES:
...
- Substital is passive by default and won't inject anything in the pages you visit. Only YOU decide when to add subtitles to a video.
=======================
Developer says, "it WON'T INJECT ANYTHING in the pages you visit"
but here he states the EXACTLY OPPOSiTE twice.
https://addons.mozilla.org/en-US/firefox/addon/substital/reviews/1779383/
https://addons.mozilla.org/en-US/firefox/addon/substital/reviews/1728241/
He says,
.......No, Substital cannot work with only the activeTab permission. The reasons is that WE INJECT ELEMENTS IN THE PAGE that need broader permissions to be able to work, like for example the area where users can search for subtitles.
FIREFOX ADDON STAFF also states the following.
==================
This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing.
===================
And the developer wriote the following.
Hey! No creepy stuff under the hood :) Substital for Firefox was manually reviewed multiple times by persons from the Mozilla Firefox Add-ons team. It's a pre-requisite to be published here in the store. If there would be creepy stuff under the hood, it would not be published.
To anyone who understand just a little bit of technology it is clear that this addon may had many changes in his code since its publishing which may or may not include any unwilling code behind.
Currently it's given permissions to access any page opened or maybe stored in your browser, not just the tab with the video opened.
Not forgetting the contracdition in developers words of not injecting anything in the page(as stated above it may include any page in your browser)
So be careful if you want to use it.
Réponse du développeur
mis en ligne : il y a 2 ansHi! We understand your concern, and it's a very valid one. Unfortunately we need these permissions for Substital to work properly. But as we move to Manifest V3, we would like to find ways to not need these permissions anymore. Moreover, as I said in other replies, a lot of popular browser extensions are also using the same permission as Substital:
AdBlocker Ultimate: Access your data for all websites
Grammarly: Access your data for all websites
LastPass Password Manager: Access your data for all websites
uBlock Origin: Access your data for all websites
To be noted: those extensions even require a lot more permissions than Substital for example. Some extensions can be complex and unfortunately those permissions are required.
To clarify, we inject Substital (elements in the page to detect the videos, to choose and load subtitles, to modify subtitles settings etc.) only when the user interacts with the Substital extension icon on the top right of the browser, unlike other extensions where scripts are automatically injected in the pages without any user interaction, or without the user even knowing. This is what we meant by "Substital is passive by default...".
As for the notes about the monitoring by Mozilla; for each new update, it is required for us to provide and upload the entire source code. The Mozilla team has always access to the entire source code of the extension. The source must be clear, readable, and nothing must be minified or hidden. And they DO monitor it, as we sometimes have to fix some issues they find.
There's absolutely no way to hide anything in the extension from the Mozilla team. The way the process works is that they build the extension on their side using the entire source code we provided to them, and they compare it with the packaged extension we submitted to the store. If it differs even by a tiny bit, they would reach out to us.
I hope I answered your interrogation. And happy to answer any question you may have :)
AdBlocker Ultimate: Access your data for all websites
Grammarly: Access your data for all websites
LastPass Password Manager: Access your data for all websites
uBlock Origin: Access your data for all websites
To be noted: those extensions even require a lot more permissions than Substital for example. Some extensions can be complex and unfortunately those permissions are required.
To clarify, we inject Substital (elements in the page to detect the videos, to choose and load subtitles, to modify subtitles settings etc.) only when the user interacts with the Substital extension icon on the top right of the browser, unlike other extensions where scripts are automatically injected in the pages without any user interaction, or without the user even knowing. This is what we meant by "Substital is passive by default...".
As for the notes about the monitoring by Mozilla; for each new update, it is required for us to provide and upload the entire source code. The Mozilla team has always access to the entire source code of the extension. The source must be clear, readable, and nothing must be minified or hidden. And they DO monitor it, as we sometimes have to fix some issues they find.
There's absolutely no way to hide anything in the extension from the Mozilla team. The way the process works is that they build the extension on their side using the entire source code we provided to them, and they compare it with the packaged extension we submitted to the store. If it differs even by a tiny bit, they would reach out to us.
I hope I answered your interrogation. And happy to answer any question you may have :)
91 notes
- Noté 5 sur 5par Cyber Ceel, il y a 11 joursAmazing. I just installed it and it immediately works perfectly, even for a service that I didn't think would be supported. 10/10!
- Noté 5 sur 5par The Sighing Dutchman, il y a un moisExcellent add-on!
It does exactly what i need it to do.
I tried another one before this, but that one failed on all fronts.
(+Sub i believe it was called, not sure though) - Noté 5 sur 5par Utilisateur ou utilisatrice 18003467 de Firefox, il y a 4 mois
- Noté 5 sur 5par Mar2ck, il y a 4 moisWorks well for youtube. I use whisper-ctranslate2 to generate subtitles for Youtube videos and this extension lets me use those subtitles directly in the browser.
- Noté 5 sur 5par Jorge, il y a 5 mois
- Noté 5 sur 5par erdgadg, il y a 6 mois
- Noté 4 sur 5par Utilisateur ou utilisatrice 17916458 de Firefox, il y a 6 moisworks well, only issue is that you can't save synchronization settings so you have to always put it again when next episode starts which is annoying, also option to move the subtitles would be great.
- Noté 1 sur 5par Gaia, il y a 8 moisTotally did not understand how the heck this should work. The add-on shows that there's a video running, I click for the subs, nothing happens. Repeated again and again and again, still nothing happened. Basically useless.
- Noté 5 sur 5par Utilisateur ou utilisatrice 17309351 de Firefox, il y a 9 mois
- Noté 1 sur 5par Utilisateur ou utilisatrice 17794830 de Firefox, il y a 9 moisWhen i pick to upload my own subtitles, they always flicker. I want to use downloaded Japanese subtitles but the flickering is too bad. I'll update the review if tell me how to fix this.
- Noté 4 sur 5par Seven, il y a 9 mois
- Noté 5 sur 5par Utilisateur ou utilisatrice 17783984 de Firefox, il y a 9 mois
- Noté 5 sur 5par Juubi, il y a 10 mois
- Noté 5 sur 5par Utilisateur ou utilisatrice 17776715 de Firefox, il y a 10 mois
- Noté 4 sur 5par Utilisateur ou utilisatrice 5812635 de Firefox, il y a un an
- Noté 5 sur 5par RimskyKors, il y a un an
- Noté 3 sur 5par Utilisateur ou utilisatrice 17603282 de Firefox, il y a un an
- Noté 4 sur 5par kay, il y a un anIt was working well before, but lately the option button at the bottom stopped working, so this is useless to me for now.
Edit: I went back to an earlier version and it's working again - Noté 3 sur 5par wolfmanFP, il y a un anI tried this on a YouTube video. The subtitles appear fine, but the menu doesn't work, so I could not change the background nor the size of the font. I tried it on Edge as well to see if it just clashed with other extensions, but it didn't work there either.
- Noté 5 sur 5par Libby, il y a un an
- Noté 5 sur 5par Utilisateur ou utilisatrice 15298176 de Firefox, il y a un an
- Noté 5 sur 5par Vic P., il y a un anThis add-on is really useful. I want it (the idea that adding a subtitle into a streaming that unsupported subtitle like bilibili.tv, etc) and try to find it on the Internet and I thought it did not exist or at least very hard to find. And I was so surprised when I found it. Thank you so much.
- Noté 4 sur 5par vgavilanes, il y a un anNot a bad extension, I would've given it 5 stars if it enabled us to move subtitles along the screen.