pwdhash / pwdhash-webextension

PwdHash webextension for firefox
https://addons.mozilla.org/de/firefox/addon/pwdhash
Other
13 stars 11 forks source link

addons.mozilla.org: new version released on 2024-04-25, status? #19

Open wolfgangkarall opened 6 months ago

wolfgangkarall commented 6 months ago

So, today I stumbled across the same behavior as outlined in #13, I was not able to type a lowercase q on various websites. I couldn't understand what changed, until (after using a private window and selectively enabling extensions there) I found the pwdhash extension to be the culprit.

I then (barely) remembered patching my local .xpi back when this lowercase q problem first arose (applying #11) but wondered why there was a change of behavior now, only to find that the extension got a recent update.

The "Last updated" info on https://addons.mozilla.org/en-US/firefox/addon/pwdhash/ says it there was a release only yesterday, on 2024-04-25.

Diff-ing the two .xpi files

ccdd9380094cb4a9787e0325406c15a021e868ca617438fc368b9f21673aa0eb  addons/pwdhash-2.0.xpi
d9233e2b97543f3e9b774a065e1ff6d2063eee8307a28ec8b62a3775b1a94717  addons/pwdhash-2.1resigned1.xpi

it seems the update really is just the change in version, so at least it's not a case of some abandoned project being hijacked to distribute some kind of malware.

Personally I've removed the extension now (I haven't used it in years, but this is an ancient FF profile I'm using), but I really wonder who has upload rights for the extension on AMO these days, and I guess it would be best to have it removed from there completely.

@collinjackson If you still are responsible for the AMO uploads, I quick status update would be great, thanks.