Comments Scripts Upgrade to Version 4
Status:
Last updated, 26/06/11Completed, released to the public 26/06/11
Chrome v3 beta(2 and 3) released to testers, 21/06/11
Chrome v3 beta(1) released to testers, 20/06/11
Chrome v3 alpha released to testers, 14/06/11
Development started, 11/06/11
Project Aims:
- Fix a major security loophole, which could allow keys to be stolen (full details of this bug will not be made public for obvious reasons)
- Redesign the way the Chrome addon works, removing the code "hacks" used when the addon was ported from Firefox
- Increase the number of common scripts between the Chrome and Firefox addons
- Decrease coupling between the classes used in the addons to make them easier to maintain and extend
- Fix the bug, which incorrectly tells users that their keys aren't valid
- Start implementing "doomsday" handlers (preventatives against possible future attacks against the remover)
- Increase the number of survey providers, which are automatically removed
- Allow the remover to better handle situations where the server is down
- Do general improvements to the addon's user interface
Needs Developing:
Fix security loopholeRemove Chrome ported script hacksIncrease the number of common scriptsDecrease class couplingRedesign Chrome systemFix permission key checking bugsDoomsday handlersIncrease the number of survey providers, which are automatically removedBetter handing of situations where the server is down
Chrome addon version 3Firefox addon version 3
Progress:
21/06/11
- Compiled third beta version of the Chrome and Firefox addon
- Fixed further flaw found in the permission key checking system (Thanks again to Norman for breaking it again!)
- Live tested the Chrome doomsday handler: it worked correctly!
- Compiled second beta version of the Chrome and Firefox addon
- Fixed flaw in the permission key checking system, found if the server is down. (Thanks to Norman for spotting that one)
- Chosen new beta testers
20/06/11
- Compiled beta version of the Chrome and Firefox addon
- Compressed scripts
- Removed useless interface setup scripts, called after all the addon's scripts have load. Anonymized single use, immediate execute functions
- Improved comments in the Firefox setup script
- Removed redundant code from Chrome
- Fixed bugs relating to the right click menu button in Firefox
- Fixed page opening problem in Chrome
- Requests beta testers on Facebook
- Updated old setting descriptions, adding common text between Firefox and Chrome
- Updated automatic detection so that all known providers are supported
- Have decided to compile beta versions of the addons, without the doomsday handler yet been implemented fully in Firefox
- Fixed doomsday permission error in Chrome
- Fixed doomsday caching error
19/06/11
- Done more research into the Firefox doomsday handler. Have not yet been able to successfully implement it
- Moved the doomsday handler out of the common scripts (implementation in Chrome and Firefox is different)
- Fixed frame error in the Chrome addon
18/06/11
- Made a small amount of progress on adding the Firefox Doomsday handler
- Research done into how to implement Doomsday handlers in Firefox
17/06/11
- Started writing Firefox Doomsday handlers - encountered problems
- Implemented new common scripts into the Firefox addon
16/06/11
- Compiled the second version of the Chrome alpha addon, after fixing known bugs
- Finished basic Doomsday handlers
15/06/11
- Doomsday scripts tested. Scripts were found to successfully remove surveys from 3 of the tested providers, most of the time. Their performance was deemed to be acceptable for use in a Doomsday event
- Added the AFU to doomsday removals
- Separated the removal scripts and the AFU
- Patches made for the Doomsday handler in Chrome
- Detected problems with the Doomsday scripts in Chrome (related to the limitations of the browser)
14/06/11
- Feedback received from Alpha testers
- Added Doomsday checks in Chrome
- Added server-side support for Doomsday events
- Created Doomsday checker class
- Successfully tested Doomsday handler
- Compiled v3 alpha for the Chrome addon
- Started to research a way of implementing a Doomsday handler
13/06/11
- Updated Chrome preferences to give a response if a connection to the server could not be made
- Added support to handle situations where the server is down
- Fixed permission key checking bugs
- Scripts changed in the addons to fix the security bug
- Unexpected Site Effect: if users of the addon, with a valid key, use the bookmarklet, they will be recognised as a donor thus they won't be subject to adverts. No modification of the bookmarklet script will be required
- Made server-side changes in the first stage of patching the security bug
- Changed the server side handler script for permission responses
- Removed depreciated code from server-side permission checking scripts
12/06/11
- Successfully tested new Chrome addon's system
- Moved all permission responsibilities from the content script to the background script
- Redesigned the way detection and injection happens in Chrome
- Removed all "pseudo" classes and functions from the Chrome addon
- Removed useless scripts from the Chrome addon
- Increased the number of surveys automatically detected by the addon
11/06/11
- Carried out a full assessment of the current addons, identifying problems
