My system is Ubuntu64 with Firefox24.0
I have a problem with the addon f@stestfox. It's a nice in-browser search tool and more but I find it the way the program handles the search queries problematic.
When I use a search shortcut, burpsuite says:
request to msgs.smarterfox.com: 80 GET /log_msg?name=popup_bubble_searched&search_engine_title=Search%20Startpage&source=FastestFox&redirect_to=https%3A%2F%2Fstartpage.com%2Fdo%2Fsearch%3Fcmd%3Dprocess_search%26cat%3Dweb%26query%3Dnginx%26language%3Denglish%26no_sugg%3D1%26ff%3D%26abp%3D-1&rand=856827465 HTTP/1.1 Host: msgs.smarterfox.com User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive
Once I saw a unique identifier (installation time?) was sent with the request to the server. Am I right thinking that the add-on sends the website I am looking at to the server? Sometimes I only mark text(IP address or link) and the add-on appears to send this data to their servers.
I tried searching for the URL in the code, but I don't speak Java. Also I am not sure if the data from the request can actually be used for tracking.
I want the awesome features of the add-on without connecting to their server, marked text should be send only to the search machines.
What should I do to prevent this add-on from sending my searches to their servers?