Is Ubuntu Online safe?

Question

Accepted Answer

Ubuntu Online is critical risk. Every time you switch or load a tab, this extension transmits the full URL to a remote server at onworks.net. The request fires automatically in the background with no prompt — you do not need to click anything or interact with the extension. Dynamic analysis captured 23 such requests across five unrelated browsing sites, including a planted marker value that was recovered verbatim from the outbound request, confirming the behavior is not limited to onworks.net content. The extension converts each character of your visited URL into its two-digit ASCII hex code before placing it in the request. This encoding does not protect the data — any standard hex decoder, including the server's own flag (&hex=1), recovers the plaintext URL instantly. Dynamic analysis confirmed a round-trip: a planted marker value was recovered verbatim from the captured request parameter. The encoding gives an appearance of obfuscation without providing any confidentiality.

Is Ubuntu free online linux server safe?

Findings