Access Denial -- What the reason?

Hi Neville, :waving_hand:

O.K. But how do you know if it´s from a trusted source?
https://addons.mozilla.org/en-US/firefox/addon/ is the primary source you get your extensions from, right?

As an experiment I just submitted the addon Dark Reader (xpi) to virustotal.
For results see here:

  • checked with 65 engines
  • " No security vendors flagged this file as malicious"
  • extensive “Code insights” are provided under “Detection”
  • More info under the “Details” tab
  • BTW: the last analysis was just 7 hours ago

Cheers from Rosika :slightly_smiling_face:

4 Likes

That is a start.
There is a difference between a virus and malicious code.

2 Likes

Hi Neville, :waving_hand:

O.K. Right at the moment I cannot think of anything else.
But, from virustotal:

Code insights
Show less

Package: Dark Reader (xpi)
Version: 4.9.123
Description: MSG_extension_description

  • The Dark Reader extension (version 4.9.123) provides dark mode functionality for websites.

  • Its manifest.json requests broad permissions (<all_urls>, storage, tabs, alarms, contextMenus, theme), which are justifiable for its stated purpose of applying themes globally and offering automation features.

  • The core logic resides in background/index.js, which manages settings, loads configuration files (site lists, theme fixes, color schemes) from local or remote GitHub sources, and dispatches theme data to content scripts.

  • The inject/fallback.js script applies a basic dark theme early in the page load and includes a compatibility fix for Microsoft Teams by overriding CSSStyleSheet.prototype.cssRules.

  • The UI scripts (ui/popup/index.js, ui/options/index.js, ui/devtools/index.js, ui/stylesheet-editor/index.js) handle user interaction and communicate with the background script.

  • While loading configuration from remote sources introduces a supply chain risk, the parsing logic for these files appears to handle CSS and structured data, not arbitrary executable JavaScript.

  • There is no evidence of malicious activities such as data exfiltration, unauthorized actions, or code injection beyond applying styling. The ‘activation’ related code appears to be local UI state management for a premium/donation feature, not external communication.

That´s from the detection tab.

Cheers from Rosika :slightly_smiling_face:

3 Likes

Denying access would make sense in some cases. I am sure there are a lot of sites that would deny access coming from foreign countries.

The drug store here in the US, which in the US sell a lot of items besides Rx, denies me access when I am in Europe. In a way it makes sense. Why would someone in the EU shop at a drug store in the US?

2 Likes

I think most shopping sites effectively deny foreign access by lifting the delivery charges. That makes sense.
Internet shopping does not always make sense… eg with clothes fitting is an issue. It is really good for rare objects…eg books, old auto parts.

2 Likes

Amazon, decathlon, etc the bigger names picks up your IP address and points you to the correct country to make purchases

Same with cars motorcycle you have to choose if you want to look at another country version. Yes different versions exist for each market.

1 Like

It’s wasteful but some people are willing to pay for the service of free shipping with some of these site, like Amazon. Order clothing and just return it if does not fix right or color was not what was expected. Just return it at no cost.

2 Likes

Thanks for the confirmation! :clinking_beer_mugs:

I was just over at ChatGPT and it showed me a change to Firefox at about:config as another option. That change is made directly to Firefox and no extension is needed.
Tested and it works.
Briefly here is the change I made to Firefox.
about:config
add “general.useragent.override”
add to value field “Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0”
Save
Restart Firefox

Valuable feedback!

4 Likes

Would changing the DNS help or not. Never needed to do it myself but dropped into this item and wondered

1 Like

FWIW dept - I just looked at whoer and got SEVERAL trackers according to EFF’s Privacy Badger add in…

Note that two appear to be Russian if you are feeling paranoid about their sites….

I’m glad that I went there w/ my Proton VPN turned on…

ex-Gooserider

2 Likes