Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is Stream Cleaner legitimate? #171

Closed
misternebula opened this issue Jun 30, 2023 · 4 comments
Closed

Is Stream Cleaner legitimate? #171

misternebula opened this issue Jun 30, 2023 · 4 comments

Comments

@misternebula
Copy link

Link : https://chrome.google.com/webstore/detail/stream-cleaner/lehcglgkjkamolcflammloedahjocbbg

It seems to block ads fine, but some people have said it's a data farming extension? I've looked through all the javascript and nothing seems out of place.

@revunix
Copy link

revunix commented Jun 30, 2023

That looks fishy af

@EatingCarBatteries
Copy link

EatingCarBatteries commented Jul 1, 2023

I am not going to base this analysis on the source code, because I don't know JS. Instead, the website:

  • (probably, generic names, bad spelling, overly positive (in a realistic scenario, people would be complaining because all twitch blockers don't work perfectly)) fake reviews:

image

  • the privacy policy is very likely copy and pasted (they state on the chrome web store that they don't collect information, but on their privacy policy they say they collect and use data, even with a CCPA data rights section)
  • There is no contact information on the website, even though they tell you to contact them on their privacy policy (their email can be found on the chrome web store)
  • There is no place to donate to the developer, and no features are behind a paywall.

@pixeltris
Copy link
Owner

pixeltris commented Jul 1, 2023

I wouldn't recommend using it.

Look at the manifest:

https://robwu.nl/crxviewer/?crx=https://chrome.google.com/webstore/detail/stream-cleaner/lehcglgkjkamolcflammloedahjocbbg&qf=manifest.json

Compared to the original:

https://github.com/cleanlock/VideoAdBlockForTwitch/blob/master/chrome/manifest.json

The manifest adds these additional permissions: notifications, tabs, gcm and runs the content.js script on EVERY page "*://*/*".

Then look at these files:

https://robwu.nl/crxviewer/?crx=https://chrome.google.com/webstore/detail/stream-cleaner/lehcglgkjkamolcflammloedahjocbbg&qf=background.js
https://robwu.nl/crxviewer/?crx=https://chrome.google.com/webstore/detail/stream-cleaner/lehcglgkjkamolcflammloedahjocbbg&qf=content.js

This requires the user to go to certain websites made by them or more likely a website with an ad made by them or their partners which will trigger their notification code. This is used to target people who are not familiar to trick them into some type of action. On operating systems such as Windows this looks quite official with the notifications popping up as system notifications. It isn't clear what type of notifications are sent as this needs to be paired with additional web page scripts.

Does the Twitch ad blocking work? Yes. It uses the VAFT script:

https://robwu.nl/crxviewer/?crx=https://chrome.google.com/webstore/detail/stream-cleaner/lehcglgkjkamolcflammloedahjocbbg&qf=ads.js

Google should do a better job of auditing their extensions.

@ghost
Copy link

ghost commented Oct 16, 2023

Stream Cleaner does work better than recommended ttv lol pro though and is free. I haven't had any buffering issues with stream cleaner, Whereas in ttv lol pro there are limited amount of proxies so at some point either it will buffer or slip an ad due to the limit in free version (you can find issues about that on internet or extension comments section), surely you can increase number of proxies by donating to the author to get access to more proxies if you like.

Stream Cleaner also shows blocking ads... status in top left corner of video player when ads show up and it starts blocking. I wouldn't mind using in a new profile, if you are concerned about the permission it requires i would recommend creating a new browser profile.

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants