Keepa.com - Amazon Price Tracker de Keepa.com

4,2 stele din 5

Răspuns de la Keepa.com

Răspunsul dezvoltatorului

Sorry - twice is twice too many.

The first prompt was Firefox's new data disclosure, mandatory for every add-on since Firefox 140. Nothing about Keepa changed, only the labels.

The second was us removing one of them: "personally identifying information", which was only ever your Keepa account token - now labelled "authentication information". Firefox re-prompts whenever a label is added, even when the list gets shorter.

It works exactly as it did before. What's left is browsing activity, because a price chart requires knowing which product you're on, and the account token. Nothing is logged unless you track something.

No further prompts expected.

670 de recenzii

Evaluat(ă) cu 1 din 5 stele
de Ex, 4 zile în urmă
Why the fuck do you need my authentication info?
Evaluat(ă) cu 1 din 5 stele
de Kijko, 7 zile în urmă
Something fishy is going on with this extension, recently I had more & more website telling me that my IP have been flagged for bot usage. I decided to investigate, and after a fews day i've seen some strange behavior on my computer :

Lot of call made to "amazon.fr" (im french) with product i've never searched and reviews product check, using some cookies stored in the browser

When I uninstalled Keepa the behavior stopped and I had no more "your ip as been flagged as bot", and to be sure i've reinstalled it and the behavior reappeared.

If you want to do the test, install any proxy, launch your browser with Keepa, go to amazon (i've done it only logged in) and let it in the background for 30 min then search for amazon domain, you will see a lot of api call made for product you never searched for.

Ill recommend any user to not install this addons, until the dev answer why it has this behavior without our autorization.
Evaluat(ă) cu 2 din 5 stele
de SweatTechnique, 9 zile în urmă
Evaluat(ă) cu 1 din 5 stele
de Utilizator Firefox 12398242, 11 zile în urmă
Very shady and manipulative price tracking. Keep in mind that the price historicals aren't accurante and sometimes are changed so items that were cheaper aren't showing or more expensive prices are shown as cheapest in the historical. Manipulative, shady, liars.
Evaluat(ă) cu 5 din 5 stele
de Bug, 14 zile în urmă
Evaluat(ă) cu 1 din 5 stele
de Xaymar, o lună în urmă
TL;DR: The new update does not add any harmful code. I've looked at the actual code of the addon stored in the XPI file, it is still the same addon as before.

Needless to say the developers did kind of understate what these consent permissions actually cover due to the broad categories Mozilla set. While there is some odd code that listens to any and all cookie changes, it only acts on Keepa cookies. The rest is just adding an element to the Amazon site that grabs the graph stuff from the Keepa domain. Same as before, but without the consent warning.

The 1* rating is intentional so this can easily be found by people being suspicious of the change.
Răspunsul dezvoltatorului
postat la 21 de zile în urmă
Thank you for actually reading the code - that's more scrutiny than most of this thread, and your read is accurate.

On the cookie listener: cookies.onChanged is scoped to an add-on's host permissions, so it only receives changes for keepa.com and the Amazon domains - not the whole browser. The first two lines of the listener discard anything that isn't keepa.com/extension. It exists because the chart is embedded from keepa.com, and Total Cookie Protection stops that frame from reading its own cookies, so the add-on mirrors them across.

On understating: fair, and we've changed it since. Two of the three labels were wrong - "website content" (we transmit none) and "personally identifying information", which was only ever the Keepa account token and is now "authentication information". The listing now spells out what each remaining category covers. If a specific line still reads as understated, tell us and we'll fix the wording.

On the rating: we understand the logic. The cost is that the star is what the ranking and most visitors register, while "no new harmful code has been added" is the part they don't read. We'd rather that sentence were the findable one.
Evaluat(ă) cu 5 din 5 stele
de Sparkling Eagle, o lună în urmă
Evaluat(ă) cu 5 din 5 stele
de Utilizator Firefox 17309351, o lună în urmă
Evaluat(ă) cu 1 din 5 stele
de Utilizator Firefox 20050815, o lună în urmă
Evaluat(ă) cu 1 din 5 stele
de ersigne, o lună în urmă
Evaluat(ă) cu 1 din 5 stele
de perro.png, o lună în urmă
This extension asks for more permissions after every update. But today it asked for AUTHENTICATION data? Too bad this extension has become malware...
Răspunsul dezvoltatorului
postat la o lună în urmă
"Authentication information" here means one thing: a token the add-on generates on your own device for your Keepa account, so the chart loads your settings and tracked products. It is not your Amazon login, not your Firefox account, and not a password. The add-on never sees any of those.

It replaced the previous label, "personally identifying information" - the list got shorter, not longer. No permissions were added. Access is unchanged: keepa.com and Amazon product pages only.

Firefox 140 introduced these labels; the code behind them is the same as it was. Full source goes to Mozilla every release and their reviewers rebuild it to verify.
Evaluat(ă) cu 1 din 5 stele
de Utilizator Firefox 14320116, o lună în urmă
Started asking for more permissions, nothing really changed, devs didn't explain exactly why this happened
Răspunsul dezvoltatorului
postat la o lună în urmă
The chain: Firefox 140 made data disclosure mandatory. Our previous version declared "none", which was not accurate under the new definitions, so Mozilla disabled it. We resubmitted using the three categories named in Mozilla's enforcement notice. We then found two of those labels were wrong and removed them, which triggered a second prompt, since Firefox re-prompts on any addition even when the list gets shorter.

You're right that nothing really changed. The add-on behaves exactly as before (with bug fixes) and still runs only on Amazon product pages and keepa.com. The full explanation is now in the add-on description.
Evaluat(ă) cu 1 din 5 stele
de FraYoshi, o lună în urmă
The addon started requiring more permissions than necessary, it was slightly acceptable.. but now is requiring AUTHENTICATION INFORMATION! This is HIGHLY alarming. I highly suggest to refrain from using this malware.
Răspunsul dezvoltatorului
postat la o lună în urmă
"Authentication information" here means one thing: a token the add-on generates on your own device for your Keepa account, so the chart loads your settings and tracked products. It is not your Amazon login, not your Firefox account, and not a password. The add-on never sees any of those.

It replaced the previous label, "personally identifying information" - the list got shorter, not longer. No permissions were added. Access is unchanged: keepa.com and Amazon product pages only.

Firefox 140 introduced these labels; the code behind them is the same as it was. Full source goes to Mozilla every release and their reviewers rebuild it to verify.
Evaluat(ă) cu 5 din 5 stele
de Adam, o lună în urmă
This is an excellent add on.
I'm all for data privacy use and disclosure but people need to read descriptions before getting their panties in a knot.
Evaluat(ă) cu 5 din 5 stele
de ff, o lună în urmă
Perfect. (To other users: Please read the provided information about the permissions before writing feedback.)
Evaluat(ă) cu 5 din 5 stele
de mark, o lună în urmă
Evaluat(ă) cu 1 din 5 stele
de stbitw, o lună în urmă
Evaluat(ă) cu 5 din 5 stele
de Younes Aassila, o lună în urmă
Thank you for the transparency around the recent permission prompts.
Evaluat(ă) cu 5 din 5 stele
de Utilizator Firefox 12254945, o lună în urmă
I've been concerned recently with this extension failing, but good to see the dev being transparent about why. I could not even tell anyone how long I've had Keepa installed - it's been a long time. Fantastic extension.
Evaluat(ă) cu 5 din 5 stele
de Utilizator Firefox 17865869, o lună în urmă
A truly useful Firefox Add-on. I'm sorry you're getting reviewed bombed by people who did not bother to read the release notes.
Evaluat(ă) cu 2 din 5 stele
de Utilizator Firefox 18292245, o lună în urmă
why you keep asking for new permission to view activity and auth info. why it was working just fine before?
Răspunsul dezvoltatorului
postat la o lună în urmă
Sorry - twice is twice too many.

The first prompt was Firefox's new data disclosure, mandatory for every add-on since Firefox 140. Nothing about Keepa changed, only the labels.

The second was us removing one of them: "personally identifying information", which was only ever your Keepa account token - now labelled "authentication information". Firefox re-prompts whenever a label is added, even when the list gets shorter.

It works exactly as it did before. What's left is browsing activity, because a price chart requires knowing which product you're on, and the account token. Nothing is logged unless you track something.

No further prompts expected.
Evaluat(ă) cu 1 din 5 stele
de Utilizator Firefox 20105560, o lună în urmă
What do you mean you need my authentication information ? I really hope this is a mistake and will get reversed.
Răspunsul dezvoltatorului
postat la o lună în urmă
The "authentication information" is your Keepa account login authentication to store your settings and enable price tracking. Nothing else.

Keepa does not track your browsing history or collect personal data. The extension only runs on Amazon product pages to load price charts, and nothing is logged or stored unless you choose to track an item.
Evaluat(ă) cu 5 din 5 stele
de Rifat, o lună în urmă
Evaluat(ă) cu 5 din 5 stele
de Kobelt, o lună în urmă
Evaluat(ă) cu 1 din 5 stele
de Utilizator Firefox 20018760, o lună în urmă