Is Ubuntu online linux server safe?
Ubuntu online linux server sends the address of every web page you visit to www.onworks.net.
On each tab switch or page load, the extension reads the tab's full http(s) URL, including the query string, and sends it hex-encoded to onworks.net along with a persistent random ID stored in the browser. The settings checkbox that looks like an opt-out has no effect, because the code that checks it is commented out.
Who publishes itApkOnline android online emulator - no other listings under this identity
ApkOnline android online emulator - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Ubuntu launcher extension sends every page URL you visit to onworks.net
Code analysis shows the background script sends each visited http(s) page URL, hex-encoded with a persistent ID, to www.onworks.net.
The settings opt-out check is commented out.
- Severity
- High unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Static analysis
You open or switch to a page on any website.
Sites whose URL contains onworks are skipped.
The extension sends the page address and a stable ID to www.onworks.net.
The address is hex-encoded, which anyone can reverse.
Tab listener and outbound request in w.js
Hex encoder
w.jsfunction b2x (bin){ var i = 0, l = bin.length, chr, hex = '' for (i; i < l; ++i) { chr = bin.charCodeAt(i).toString(16) hex += chr.length < 2 ? '0' + chr : chr } return hex}- url68747470733a2f2f6578616d706c652e636f6d2f3f713d74657374
Hex encoding of the full page address, including the query string.
- uk3x9qa7mzp
Random 10-character ID stored locally and reused on every request.
- hex1
Flag stating that the url value is hex-encoded.
- www.onworks.net
Receives the encoded page address and per-install ID on each new tab URL.
Static analysis finding. This behaviour was identified by reading the shipped extension code and has not yet been reproduced in a live run. The trigger conditions and the exact data sent are read from the code, not from an observed capture.
What it can do
Permissions this extension asks for, as declared in version 1.3.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
See the address and title of every tab you have open
tabs
Where it sends data
Destinations our analysis observed Ubuntu online linux server contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.onworks.net
Ubuntu online linux server sends data to www.onworks.net. 3 other extensions we have analysed send data here.