1,252 karma · joined October 29, 2008
rgd@hey.com
The problem then becomes that all your subscription logic is handled via Stripe, so at that point you have to move your data to something like ChargeBee, or you have to set up your own in-house solution that handles working with PayPal's own recurring payments authorizations for some accounts, or Stripe's subscription features on the other.
We honestly haven't gotten far enough to decide what we're going to do about this yet. Moving to something like ChargeBee would make things simpler, but it adds an additional cost on top of what we're already paying Stripe/PayPal, plus we have to migrate all of the thousands of customer's data out of Stripe and into something else...
Anyway, might not be the same thing, and I don't know what the "official" name for it is, but this stream of tweets definitely sounds exactly like what my friend was saying at the time.
How is this not entirely illegal?
And it certainly shows an incredible flaw in Chrome extensions. This extension didn't do this when I installed it. A silent auto-update though basically turned it into the worst malware I've ever had installed on my computer. How can any Chrome extension ever be trusted?
Furthermore, I spend a lot of time in Chrome Dev Tools, and the Network tab and I are no stranger. I would easily have noticed if my keystrokes were being sent back to a server and it was shown in there. So not only can an extension be silently updated, but it's capable of using a network connection that doesn't appear in the Chrome Network tab, that only Wireshark can reveal? That seems almost as ridiculous as what the extension author did.
You don't lose out on anything at all, I'm doing this very thing.
But Dropbox is my lifeblood -- the most-used tool in my toolbox. I have everything important in there. There is simply no way I can grant access to full thing, even if you promise to "play nice". It's simply too risky.
Fix that, and you'll be getting $10/mo. from me in no time.