LockedLDSToolbar.com

It has been a while since I was on here but I have been busy.

About 1 year ago I bought the domain LDSToolbar.com with the vision to create a toolbar for IE and FF packed with links and features relating to the Church.

The Toolbar is pretty much ready. It needs only tidying up. My main work is currently on the website which still needs loads of work.

I would be greatful if you guys can have a go at the Toolbar and see what works and what doesn't.

Any Feedback would be great.

Stephan

PS The Installation Button is at the Top Right Corner.

Stephan wrote:It has been a while since I was on here but I have been busy.

About 1 year ago I bought the domain LDSToolbar.com with the vision to create a toolbar for IE and FF packed with links and features relating to the Church.

The Toolbar is pretty much ready. It needs only tidying up. My main work is currently on the website which still needs loads of work.

I would be greatful if you guys can have a go at the Toolbar and see what works and what doesn't.

Any Feedback would be great.

Stephan

PS The Installation Button is at the Top Right Corner.

Great app. Here are my comments:

• Why when I installed it, did I get a media player widget in the toolbar that played NPR stations?
• Explain the "messages" section.
• Can you move or copy "LDS Tech" from communities to "Official" web sites?

Keep up the awesome work!

Tom

The radio is a plugin. I will have BYU Radio on there. I haven't finished it yet completely

I will move it to the official websites no problem

The messages is something cool. I can send messages to the toolbar. That is basically a rss feed. But people can just delete messages.

So for example If I add new websites or a new feature (I have a few up my sleeve) I can send messages to everyone pointing this out

Hope this helps

And BYURadio has three feeds now, English vocal/instrumental/talk (main BYURadio station), Spanish/Portuguese (BYURadio International) and an all-instrumental stream (BYURadio Instrumental). Got all those?

Yeah just need to put them in now.

Also if anyone has got any links that are still missing or any suggestion for new categories please let me know

Stephan wrote: The messages is something cool. I can send messages to the toolbar. That is basically a rss feed. But people can just delete messages.

So for example If I add new websites or a new feature (I have a few up my sleeve) I can send messages to everyone pointing this out

Hope this helps

That is a cool feature! Nice work.

Tom

Yes so I can remind everyone to do their home and visiting teaching 1 week before the end of the month.

hehe

Just thought I let you know that the toolbar is officially live for 2 weeks. Since then I have over 100 installs and the daily number of installations is growing daily.

Thanks for everyone that is using it. If you have anything that I could add or improve let me know.

The toolbar is VERY cool and is much improved since my first visit. It now has a permanent spot in firefox for me! Nice work!

Tom

I especially like the RSS feeds. It would be super cool if our RSS feed was in there too

This toolbar is spyware.

I downloaded the massive firefox extension (450 K are you kidding me) and after viewing the size I wondered what caused the bloat. I found it soon enough. The code points to conduit.com (a free toolbar builder). Conduit.com claims to protect your privacy but then asks questions like "do you mind if we track usage statistics". Now to clarify this is another way to say can we eat your cookies and stuff you with more. The toolbar constantly communicates with conduit regardless of how you answer the usage statistics question which in my opinion is a direct violation of their privacy agreement but hey nothing is really free. It knows and tracks every site you visit. This can be easily proven by visiting another conduit.com enabled site and see how the toolbar reacts with it.

Here is the silver bullet though. This extension taps an active x control and exposes your computer to previously patched vulnerabilities

pref("general.useragent.vendorComment", "ax");
pref("security.xpconnect.activex.global.hosting_flags", 9);
pref("security.classID.allowByDefault", false);
/* Windows Media Player */
pref("capability.policy.default.ClassID.CID6BF52A52-394A-11D3-B153-00C04F79FAA6", "AllAccess");
pref("capability.policy.default.ClassID.CID22D6F312-B0F6-11D0-94AB-0080C74C7E95", "AllAccess");

which ... and i quote

[size=-1]"turns absolutely everything on and makes everything scriptable—even those ActiveX controls flagged as "do not script me"—set these preferences:"[/size]

Hmmmm nasty.

I like the idea of the toolbar but It would be nice if you had coded it yourself and could hang your hat on the security. If you are offering a firefox extension then it should pass the firefox extension approval process and be sanctioned by mozilla. IE users are probably brimming with spyware already and won't notice yet another key logging, cookie stuffing, site watching application.

Thanks

This is not true.

Yes Conduit tracks statistics but it is limited to the following

Number of new installs
Number of active users
Number of Clicks on the toolbar (Not which sites actually have been clicked)
Number of searches (Not what has been searched)

If you opt out then nothing like this will be recorded. If you visit a website that uses visitor tracking they will be able to record a lot more information than this.

If this is spyware how come companies like

WWF, Greenpeace, MBL, Opodo, TechCrunch, Discovery Networks, Lufthansa, ASPCA

use this same company to create toolbars? I do not think that those companies can afford to create and distribute spyware infested toolbars.

So if you read the message above and are concerned about your privacy read this privacy statement.

http://www.conduit.com/privacy/ConduitPrivacy.aspx

There is no spying going on

I have done a little bit more research.

There are multiple reasons why there is traffic between the conduit network and the toolbar.

1. The icons are stored on their server and when the need to be displayed ie you open the LDS Websites menu the toolbar requests those images.

2. The toolbar is auto updating so that you always have an uptodate toolbar. BTW autoupdating does not mean auto installing other software. It will only check for the latest version of the software in specific intervalls.

Stephan

In addition to that Conduit.com is certified by TRUSTe

http://www.truste.org/ivalidate.php?url ... sealid=101

If you really think that they have broken their privacy statement contact truste and they will investigate.

Still, this information is wont to make one very nervous, and unless you actually built the Toolbar yourself, it's hard to fully trust (or even know) all the things that are going on under the hood.

It does not concern me.

Do you use Google or Yahoo? Well they probably gather more information than the conduit toolbar.

Do you check on websites where advertisement comes from ? If no companies like doubleclick are gathering a huge amount of data.

On the other side I find it interesting that both posts ( #11 and #15 ) have come from someone that has just newly registered. Makes me wonder if it may come from the same person ?

Interesting assumption. (The answer is no, I am not the same person as Marine.)

However, in response to your wonderings:

1) I actually fear the power of Google. I recognize that they have great tools, and are a source of some pretty good things, but I fear that they have a long reach, and they keep so much data, and have the capabilities of tracking so much data, it's simply unnerving.

2) I make it a practice to never click on paid advertisements. I ignore them at all costs.

In addition, BTW, I really think that you have a great idea. Building a toolbar for people of the LDS faith, free of charge, and you aren't even out to make a buck. It's definitely an effort worth pursuing. Although, I had thought at first from your first posts, that you yourself had actually built it...

Let me ask you: aren't you even a little concerned with the security risks posed by the toolbar as discussed by Marine? (I know I would be.)

Cyclospe wrote:Still, this information is wont to make one very nervous, and unless you actually built the Toolbar yourself, it's hard to fully trust (or even know) all the things that are going on under the hood.

He might trust it if he built it himself, but that doesn't mean that I automatically trust a product from some unknown individual. I would have more trust in a product produced by a larger entity (that I trusted) than just some individual. I admit though that what's up for debate is Conduit's trustworthiness. But my initial point is that basing his code on someone else's code or some company's code does not automatically degrade the trustworthiness.

The real issue is conduit's use of an activex hack which then exposes the user to potential viruses, spyware etc. Perhaps conduit has no malicious intent but as most things go this can be explained by ignorance. The windows media player hack is another issue with potential risks as well. Another thing I noticed is that the initial install prompts the user to switch default search to a sponsored google account.

I personally think it is wrong to make money off an lds toolbar being promoted by a subdomain of lds.org.

I could go on and on. This does not ring true.

Stephan wrote:On the other side I find it interesting that both posts ( #11 and #15 ) have come from someone that has just newly registered. Makes me wonder if it may come from the same person ?

Actually, Cyclospe is not newly registered at all. He/she registered nearly 3 months ago. In fact, this user had been registered over a month before you even posted this thread.

Just because Cyclospe had no posts prior to his thread, does not mean the user is newly registered.

marine wrote:I personally think it is wrong to make money off an lds toolbar being promoted by a subdomain of lds.org.

How is he making money? You can't know for certain.

mkmurray wrote:How is he making money? You can't know for certain.

The privacy policy on this page http://www.ldstoolbar.com/privacy is being violated in multiple ways. At one point the statement is made that there is advertising

"Our business model is based on displaying sponsored links on search results pages (advertisers pay per click, not per appearance)."

I would prefer an open source and community supported solution.

Ok this is going to be my last post.

When I had the idea for the toolbar over 1 year ago I wanted to use some software to create it. Soon I found out that the toolbars created with that software were classified as spyware because of the possibility to add certain things to it. So I left it.

Then I found conduit. I have a good personal contact with one of the developers that have done some personalization for me. I trust them now and I will in the future. If you don't then that's fine don't install the toolbar.

Yes there is some advertisement. The google search is nothing else but a custom search engine from google. Part of the money gets passed on to me (a very small part). However I did not do this to gain money. I did it to have a toolbar and promote the good LDS sites and conduit seemed the easiest way to do this. I have a family and a fulltime job and don't have the time spend hours and hours to develop a toolbar from scratch.

If you look properly this place is there to let people know about LDS Links and Resources. I don't think that 2 or 3 posts count as promoting.

So I wont post anymore coments on this thread. Enjoy discussing this further ( or not ).

Awareness of this toolbar tool has been established. Like any solution written by the community or by companies, the Church in no way endorses the use of this toolbar. I'm going to lock this thread now. Should anyone have any personal questions or comments, please direct them to me.

Tom