Comments Scripts Upgrade to Version 4

Status:

Last updated, 26/06/11
Completed, released to the public 26/06/11
Chrome v3 beta(2 and 3) released to testers, 21/06/11
Chrome v3 beta(1) released to testers, 20/06/11
Chrome v3 alpha released to testers, 14/06/11
Development started, 11/06/11

Project Aims:

  • Fix a major security loophole, which could allow keys to be stolen (full details of this bug will not be made public for obvious reasons)
  • Redesign the way the Chrome addon works, removing the code "hacks" used when the addon was ported from Firefox
  • Increase the number of common scripts between the Chrome and Firefox addons
  • Decrease coupling between the classes used in the addons to make them easier to maintain and extend
  • Fix the bug, which incorrectly tells users that their keys aren't valid
  • Start implementing "doomsday" handlers (preventatives against possible future attacks against the remover)
  • Increase the number of survey providers, which are automatically removed
  • Allow the remover to better handle situations where the server is down
  • Do general improvements to the addon's user interface

Needs Developing:

  • Fix security loophole
  • Remove Chrome ported script hacks
  • Increase the number of common scripts
  • Decrease class coupling
  • Redesign Chrome system
  • Fix permission key checking bugs
  • Doomsday handlers
  • Increase the number of survey providers, which are automatically removed
  • Better handing of situations where the server is down
  • Chrome addon version 3
  • Firefox addon version 3


Progress:

21/06/11

  • Compiled third beta version of the Chrome and Firefox addon
  • Fixed further flaw found in the permission key checking system (Thanks again to Norman for breaking it again!)
  • Live tested the Chrome doomsday handler: it worked correctly!
  • Compiled second beta version of the Chrome and Firefox addon
  • Fixed flaw in the permission key checking system, found if the server is down. (Thanks to Norman for spotting that one)
  • Chosen new beta testers


20/06/11

  • Compiled beta version of the Chrome and Firefox addon
  • Compressed scripts
  • Removed useless interface setup scripts, called after all the addon's scripts have load. Anonymized single use, immediate execute functions
  • Improved comments in the Firefox setup script
  • Removed redundant code from Chrome
  • Fixed bugs relating to the right click menu button in Firefox
  • Fixed page opening problem in Chrome
  • Requests beta testers on Facebook
  • Updated old setting descriptions, adding common text between Firefox and Chrome
  • Updated automatic detection so that all known providers are supported
  • Have decided to compile beta versions of the addons, without the doomsday handler yet been implemented fully in Firefox
  • Fixed doomsday permission error in Chrome
  • Fixed doomsday caching error


19/06/11

  • Done more research into the Firefox doomsday handler. Have not yet been able to successfully implement it
  • Moved the doomsday handler out of the common scripts (implementation in Chrome and Firefox is different)
  • Fixed frame error in the Chrome addon


18/06/11

  • Made a small amount of progress on adding the Firefox Doomsday handler
  • Research done into how to implement Doomsday handlers in Firefox


17/06/11

  • Started writing Firefox Doomsday handlers - encountered problems
  • Implemented new common scripts into the Firefox addon


16/06/11

  • Compiled the second version of the Chrome alpha addon, after fixing known bugs
  • Finished basic Doomsday handlers


15/06/11

  • Doomsday scripts tested. Scripts were found to successfully remove surveys from 3 of the tested providers, most of the time. Their performance was deemed to be acceptable for use in a Doomsday event
  • Added the AFU to doomsday removals
  • Separated the removal scripts and the AFU
  • Patches made for the Doomsday handler in Chrome
  • Detected problems with the Doomsday scripts in Chrome (related to the limitations of the browser)


14/06/11

  • Feedback received from Alpha testers
  • Added Doomsday checks in Chrome
  • Added server-side support for Doomsday events
  • Created Doomsday checker class
  • Successfully tested Doomsday handler
  • Compiled v3 alpha for the Chrome addon
  • Started to research a way of implementing a Doomsday handler


13/06/11

  • Updated Chrome preferences to give a response if a connection to the server could not be made
  • Added support to handle situations where the server is down
  • Fixed permission key checking bugs
  • Scripts changed in the addons to fix the security bug
  • Unexpected Site Effect: if users of the addon, with a valid key, use the bookmarklet, they will be recognised as a donor thus they won't be subject to adverts. No modification of the bookmarklet script will be required
  • Made server-side changes in the first stage of patching the security bug
  • Changed the server side handler script for permission responses
  • Removed depreciated code from server-side permission checking scripts


12/06/11

  • Successfully tested new Chrome addon's system
  • Moved all permission responsibilities from the content script to the background script
  • Redesigned the way detection and injection happens in Chrome
  • Removed all "pseudo" classes and functions from the Chrome addon
  • Removed useless scripts from the Chrome addon
  • Increased the number of surveys automatically detected by the addon


11/06/11

  • Carried out a full assessment of the current addons, identifying problems