Mozilla has removed four extensions for Firefox from Avast and its affiliate AVG from the official extension catalog: Avast Online Security, AVG Online Security, Avast SafePrice, and AVG SafePrice. The fact is that these products collected user data (referrer addresses, unique UIDs, country code, browser name and version, OS information, etc.) and looked at the history.
The first two extensions warned users when switching to known malicious or suspicious sites, two more were intended for online buyers, showed price comparisons, great offers and affordable discount coupons.
Extensions were removed after Mozilla received a warning from AdBlock Plus developer Vladimir Palant. The fact is that at the end of October he studied the work of Avast Online Security and AVG Online Security, and found that add-ons collect much more data than is necessary for their work, including a detailed browser history. Palant then posted on his blog one more materialin which he described the similar behavior of Avast SafePrice and AVG SafePrice.
Since the October blog post did not attract much attention and received little publicity, Palant was forced to contact Mozilla engineers directly this week. After that, all four extensions were removed within 24 hours.
Interestingly, at the moment, all four add-ons are still available in the Chrome Web Store (one, 2, 3, 4), although Google, like Mozilla, prohibits this behavior of add-ons. Palant writes that it’s more difficult to remove extensions in the case of Google, since deletions usually occur only after widespread media coverage.
Avast representatives already declaredthat Avast Online Security simply needs to collect the history of URLs to provide users with security, because the addon is designed to protect against phishing and malicious sites. It is emphasized that data collection is carried out without user identification. Avast developers promised to solve the problem soon: release an updated version of the extension, following all Mozilla standards, and assured that the addon will soon return to the catalog.