I’ve published my article on the Impact Hero SDK (as used by at least 16 browser extensions) and the refoorest extension. The company behind these is the France-based Colibri Hero, also known as allcolibri: https://palant.info/2024/10/01/lies-damned-lies-and-impact-hero-refoorest-allcolibri/
Trust me, the article title is justified. I couldn’t believe it when I saw how everything they claim turns out to be a lie. Their line of business is commonly called “affiliate fraud,” so they carefully avoid this topic and instead make the impression of being supported by altruistic companies that genuinely care for our planet.
They promise to plant trees if people use their extensions but their numbers are all fake. The numbers displayed by the extension don’t add up to the numbers shown on their web page. Maybe they should have implemented access control if they didn’t want anybody to figure that out. And the numbers on the web page – well, these have been increasing at a constant rate of 20 trees per hour for the past four years, completely ignoring what their extension users did or didn’t.
Do they actually donate any money? Probably, I don’t know. They don’t disclose their finances, and if they did these would probably turn out fake as well. Should anyone trust them? No, not from what I saw. Should these extensions be nuked from orbit (or at least from the add-on stores)? Yes, absolutely.
There is more “fun” stuff going on here, so feel free to read the article.
Yellow Flag /
npub190…f5wdd
2024-10-01 12:13:47
Author Public Key
npub190z95jsfjmjuzvdrq2t27ucldpvvsvh46tcxl9elexhy9mp2qeps6f5wddSeen on
wss://relay.mostr.pubPublished at
2024-10-01 12:13:47Event JSON
{
"id": "3041c1683d33f07b3fe45a7c74920fd1def048c5e06e59c70d8777b8b3be78be",
"pubkey": "2bc45a4a0996e5c131a30296af731f6858c832f5d2f06f973fc9ae42ec2a0643",
"created_at": 1727784827,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/WPalant/statuses/113232106425106704",
"activitypub"
]
],
"content": "I’ve published my article on the Impact Hero SDK (as used by at least 16 browser extensions) and the refoorest extension. The company behind these is the France-based Colibri Hero, also known as allcolibri: https://palant.info/2024/10/01/lies-damned-lies-and-impact-hero-refoorest-allcolibri/\n\nTrust me, the article title is justified. I couldn’t believe it when I saw how everything they claim turns out to be a lie. Their line of business is commonly called “affiliate fraud,” so they carefully avoid this topic and instead make the impression of being supported by altruistic companies that genuinely care for our planet.\n\nThey promise to plant trees if people use their extensions but their numbers are all fake. The numbers displayed by the extension don’t add up to the numbers shown on their web page. Maybe they should have implemented access control if they didn’t want anybody to figure that out. And the numbers on the web page – well, these have been increasing at a constant rate of 20 trees per hour for the past four years, completely ignoring what their extension users did or didn’t.\n\nDo they actually donate any money? Probably, I don’t know. They don’t disclose their finances, and if they did these would probably turn out fake as well. Should anyone trust them? No, not from what I saw. Should these extensions be nuked from orbit (or at least from the add-on stores)? Yes, absolutely.\n\nThere is more “fun” stuff going on here, so feel free to read the article.",
"sig": "c27b160c4ba5af78ed9c1987557fa9f2c589d3f8b6524894c9ae3628efdd5db79b2fa22c4c959b5ee8d2c92eb6cb2535902e3fc8f069f60b88e23c620013ab08"
}