Announcing: Daz Deals Browser Add-on

11819212324100

Comments

  • Sfariah DSfariah D Posts: 26,558
    Scavenger said:

    DON'T DO IT!!! IT'S AN EVIL OPTION!!!!

    No one should know just how much they've spent here! It is info that will haunt them forever!!!

    I think mine is too high.  How could I have spent that much! 

  • AtiAti Posts: 9,143
    Scavenger said:

    DON'T DO IT!!! IT'S AN EVIL OPTION!!!!

    No one should know just how much they've spent here! It is info that will haunt them forever!!!

    I think mine is too high.  How could I have spent that much! 

    You've been here for quite a while... :)

  • Bug report: the wishlist sync is repeatedly sending me the same message about a specific product it thinks is now $0.00. The product has actually just been removed from the catalog.

  • AtiAti Posts: 9,143

    Bug report: the wishlist sync is repeatedly sending me the same message about a specific product it thinks is now $0.00. The product has actually just been removed from the catalog.

    Thank you for the report. I see you've also sent me an email with the item in question, that's even better. I'll look into this.

    Question: Do you still see this product in your wishlist? Products that are removed from the store are usually removed from the wishlist as well, and thus should be removed from the notifications.

  • @Ati This is a fantastic plugin!  The only bad thing I have noticed is that since installing it every page I go to on daz3d.com has a significant lag before mozilla becomes responsive again.  Other than that this has been highly beneficial.

  • It has been removed from my wishlist as well. 

  • firewardenfirewarden Posts: 1,484

    Sooo... question, but after Novica pointed it out in another thread, how much this addon accesses my DAZ account has left me wondering. The addon obviously grabs our account info. Can it be hacked and spend our store credit? Use our credit card or PayPal info? I love this addon, but I'm kinda paranoid about if it has control of my DAZ account.

  • AtiAti Posts: 9,143

    Sooo... question, but after Novica pointed it out in another thread, how much this addon accesses my DAZ account has left me wondering. The addon obviously grabs our account info. Can it be hacked and spend our store credit? Use our credit card or PayPal info? I love this addon, but I'm kinda paranoid about if it has control of my DAZ account.

    I try to be as brief as possible, but if you need more info on any of the topics, let me know, and I'll explain further.

    Wishlist data: DAZ sends your browser your wishlist data and your purchased items data to be stored on your computer. The addon uses this locally stored version of your wishlist. It does not have access to your data on DAZ servers, only to what your browser has locally stored on your computer on the pages it is allowed to run on. (Which is the DAZ site and the site of the notification server. The addon is not allowed to run on any other site. So even if PayPal does store some data on your computer -- I have no idea if it does --, the addon is not allowed to access it. Local programs running on your computer may be allowed to access it, but that's a different story, since the addon is not such a standalone program.)

    Total money spent: I think this was mentioned in the other thread. The way it works, is first the addon (in your browser) checks to see how long your purchase history is by examining the html code of the order history page. It does not know your DAZ login details. If you are not logged in, it will not be able to sum up your spendings simply because then there is no way for it to log in to your account. Then it loads the same pages you would load if summing everything up, and sums everything up. You can see the percentage change as it flips through the pages. This is all done in the browser. No data leaves the browser during this calculation. The addon is not sending your stuff to a remote server to calculate anything. It calculates everything itself, right within the browser, without any of this data leaving it.

    Access to your DAZ account: the addon does not know your login details. It works based on the data that is stored in your browser already. The login data is not stored locally, so it cannot have access to this data in any way. Unfortunately, despite all our efforts to emphasize that the data you enter in the notifications section should NOT be your DAZ data, we've had some people enter their DAZ login details. Where I noticed that the passcode is not the passcode we expect, I let the person know that they may have accidentally entered their DAZ login details, and I asked them to please change it as soon as possible. Not because anything happened to the data, but because I don't ever want to have access to anyone else's login details. I have my own login data. :) Overdrawn has his own login data. :)

    Can it be hacked to spend store credit: this will always be a controversial question, so I'll explain what's possible at this point in time. Can it be hacked by way of including unwanted third-party data, such as images? We do not include external images, all images that the addon uses are in the addon itself, which means it is stored locally on your computer. Someone with access to your computer could potentially replace these images with malicious ones, but with access to your computer, there are a lot more easier ways to get your credit card data, so this is a highly unlikely scenario. Can it be hacked by hacking the notification server? Hacking the notification server could cause embarrassing moments, because it could change the data displayed to you in the price history window; but because of the nature of that chart, and the security built into every browser today, even that would not give access to your data to an attacker. Can it be hacked by someone writing an entirely new addon, with malicious functionality and replace it with the real addon? I have no idea how this part works, I'll let @Overdrawn explain this, he's the expert on how extensions work in general.

    When version 2 came out, I made a post, explaining exactly what data gets sent to the notification server (if you have those features enabled) and why. For more info on this, please see that post in this thread.

    What if I'm lying? :) That's the beauty of addons: you can check the source code for yourself. We've kept it pretty clean, no obfuscation anywhere. A few posts back I've linked to a webpage which explains how you can read the source code of any of the addons installed in your browser. Feel free to use any other method, if you like. And what gives me the best peace of mind: the addon is reviewed by third-party experts at Mozilla before allowing it to appear in the Mozilla store. If they allow it to appear, then I feel confident that we did not accidentally slip in any backdoors. I have a feeling that our access to the Mozilla marketplace would be immediately terminated if we even tried something like that. While we're on the subject: Chrome does allow any updates to appear in the store as soon as we upload them, there's no human review before it gets into the Chrome store. This allows all updates to be sent out a lot faster, but it doesn't have that added security that the Mozilla store provides in exchange for the updates sometimes waiting more than a month to roll out.

    I hope I've touched on all the critical points. Let me know if I missed anything out. (Reply only coming tomorrow, I'm off to sleep now. :))

  • duane_moodyduane_moody Posts: 132
    edited January 2017

    It has been removed from my wishlist as well. 

    As it so happens, the item wasn't fully removed from my wishlist, it left behind an incomplete slab with no "Remove from Wishlist" button. I opened the console, entered daz.wishlistdisplay.remove(productsku) and let the store do its thing. It appears to be gone from my wishlist now, in both the page and the wishlistItems JSON array in localStorage.

    So, the question here is did the vendor's rather abrupt exit from the store and subsequent store wipe of all references to his products somehow not update everyone's wishlist to properly remove his product SKUs, or (let's hope not) did the extension somehow interfere with that housekeeping?

    Post edited by duane_moody on
  • AtiAti Posts: 9,143

    It has been removed from my wishlist as well. 

    As it so happens, the item wasn't fully removed from my wishlist, it left behind an incomplete slab with no "Remove from Wishlist" button. I opened the console, entered daz.wishlistdisplay.remove(productsku) and let the store do its thing. It appears to be gone from my wishlist now, in both the page and the wishlistItems JSON array in localStorage.

    So, the question here is did the vendor's rather abrupt exit from the store and subsequent store wipe of all references to his products somehow not update everyone's wishlist to properly remove his product SKUs, or (let's hope not) did the extension somehow interfere with that housekeeping?

    The addon only reads this data, and does not interfere with it in any way. In my experience, there are times when an item is gone from the store, but a black, unremovable box still remains in the wishlist (ie: it is not removed from the wishlist). This is usually gone in a while, I'm not sure if there's an automatic cleanup happening at DAZ, or if it's removed manually (again, by DAZ) from time to time. This is "normal", and has been happening ever since I've been a customer here. 

    Once the item is actually removed from the wishlist, it gets synced and deleted from the notification as well.

  • AtiAti Posts: 9,143

    Display of NON-PC prices is coming closer and closer. It's not a question of implementing it, it's a question of having enough data to display, and we're almost there. :)

  • firewardenfirewarden Posts: 1,484
    Ati said:

    Sooo... question, but after Novica pointed it out in another thread, how much this addon accesses my DAZ account has left me wondering. The addon obviously grabs our account info. Can it be hacked and spend our store credit? Use our credit card or PayPal info? I love this addon, but I'm kinda paranoid about if it has control of my DAZ account.

    I try to be as brief as possible, but if you need more info on any of the topics, let me know, and I'll explain further.

    Wishlist data: DAZ sends your browser your wishlist data and your purchased items data to be stored on your computer. The addon uses this locally stored version of your wishlist. It does not have access to your data on DAZ servers, only to what your browser has locally stored on your computer on the pages it is allowed to run on. (Which is the DAZ site and the site of the notification server. The addon is not allowed to run on any other site. So even if PayPal does store some data on your computer -- I have no idea if it does --, the addon is not allowed to access it. Local programs running on your computer may be allowed to access it, but that's a different story, since the addon is not such a standalone program.)

    Total money spent: I think this was mentioned in the other thread. The way it works, is first the addon (in your browser) checks to see how long your purchase history is by examining the html code of the order history page. It does not know your DAZ login details. If you are not logged in, it will not be able to sum up your spendings simply because then there is no way for it to log in to your account. Then it loads the same pages you would load if summing everything up, and sums everything up. You can see the percentage change as it flips through the pages. This is all done in the browser. No data leaves the browser during this calculation. The addon is not sending your stuff to a remote server to calculate anything. It calculates everything itself, right within the browser, without any of this data leaving it.

    Access to your DAZ account: the addon does not know your login details. It works based on the data that is stored in your browser already. The login data is not stored locally, so it cannot have access to this data in any way. Unfortunately, despite all our efforts to emphasize that the data you enter in the notifications section should NOT be your DAZ data, we've had some people enter their DAZ login details. Where I noticed that the passcode is not the passcode we expect, I let the person know that they may have accidentally entered their DAZ login details, and I asked them to please change it as soon as possible. Not because anything happened to the data, but because I don't ever want to have access to anyone else's login details. I have my own login data. :) Overdrawn has his own login data. :)

    Can it be hacked to spend store credit: this will always be a controversial question, so I'll explain what's possible at this point in time. Can it be hacked by way of including unwanted third-party data, such as images? We do not include external images, all images that the addon uses are in the addon itself, which means it is stored locally on your computer. Someone with access to your computer could potentially replace these images with malicious ones, but with access to your computer, there are a lot more easier ways to get your credit card data, so this is a highly unlikely scenario. Can it be hacked by hacking the notification server? Hacking the notification server could cause embarrassing moments, because it could change the data displayed to you in the price history window; but because of the nature of that chart, and the security built into every browser today, even that would not give access to your data to an attacker. Can it be hacked by someone writing an entirely new addon, with malicious functionality and replace it with the real addon? I have no idea how this part works, I'll let @Overdrawn explain this, he's the expert on how extensions work in general.

    When version 2 came out, I made a post, explaining exactly what data gets sent to the notification server (if you have those features enabled) and why. For more info on this, please see that post in this thread.

    What if I'm lying? :) That's the beauty of addons: you can check the source code for yourself. We've kept it pretty clean, no obfuscation anywhere. A few posts back I've linked to a webpage which explains how you can read the source code of any of the addons installed in your browser. Feel free to use any other method, if you like. And what gives me the best peace of mind: the addon is reviewed by third-party experts at Mozilla before allowing it to appear in the Mozilla store. If they allow it to appear, then I feel confident that we did not accidentally slip in any backdoors. I have a feeling that our access to the Mozilla marketplace would be immediately terminated if we even tried something like that. While we're on the subject: Chrome does allow any updates to appear in the store as soon as we upload them, there's no human review before it gets into the Chrome store. This allows all updates to be sent out a lot faster, but it doesn't have that added security that the Mozilla store provides in exchange for the updates sometimes waiting more than a month to roll out.

    I hope I've touched on all the critical points. Let me know if I missed anything out. (Reply only coming tomorrow, I'm off to sleep now. :))

    Thank you for the explanation; that makes perfect sense. I'm gonna blame flu-brain fog, but after reading Novica's comment about the addon having access to our DAZ account, I was thinking "okay, I never gave it my password or login info, but it does know how much I spent and everything I own, so maybe being logged in is enough to give it control?" But I didn't want to give up such a useful tool without asking. SO glad that I did.

    Thank you again for the explanation and the addon. I know y'all probably get some tiny referral amount from DAZ, but do y'all have a donation site? I thought you did, but can't find it. (Sorry, sick as a dog and my brain is majorly non-functional. Note for next year: Flu shot!!!)

  • AtiAti Posts: 9,143

    do y'all have a donation site? I thought you did, but can't find it.

    Overdrawn's signature has a link, let's say here: http://www.daz3d.com/forums/discussion/comment/1996241/#Comment_1996241

    It is just a link to message him.

    (Sorry, sick as a dog and my brain is majorly non-functional. Note for next year: Flu shot!!!)

    Get well soon!

  • LianaLiana Posts: 1,035

    Like the part when the browser add-on shows the price history of said item I am looking at. I think that is pretty cool to see. Thanks! :)

  • AndySAndyS Posts: 1,438

    Hi ati,

    Ati said:
    AndyS said:

    sorry to say this, but the plugin and price alerts don't work properly. Nor does the price history.
    Even today: Price report says "Which Way Compass Props" were for free. But in real: $10.47

    It's free today for PC members, so it shows free as the best price for today. That's how it's supposed to work.

    (It has been suggested a few posts earlier that we also show the higher, non-PC prices. While I originally thought it was not a good idea, data for it IS being analyzed and will start showing for non-PC members in a few weeks.)

    AndyS said:

    And what about to get the summary out of the DAZ purchases, as promissed in the parameter settings? I only get the normal purchase history with all seperate entries over 16 pages, as normal.

    What do you mean? You can turn features on and off in the Options of the add-on. The purchase history itself is not changed, other than adding the total value and the money spent.

    That's still not useful.

    First: it of cause has to consider the PC status. I'm as non-member get cought by your tool to realize that all is NOT true.
    Example: Today you show Hip-Hop outfit for 58% off. But in the shop it only displays as 40% off.

    Sorry, but I feel cheated.

    Second: The total spent display.
    How should that work. I can't find a corresponding parameter in the settings to let the total sum being displayed.
    Could you please attach some kind of manual? Some screenshots ?

  • AndySAndyS Posts: 1,438
    Ati said:

    Where do you find the total? I can't seem to find it anywhere.

    On your "Orders" page. (Little blue man in top right corner -> Orders) https://www.daz3d.com/sales/order/history

    You need to enable it first. It is off by default. To enable, click the addon icon in your browser to open the options page, and make sure the "Total Spent & Total Value Owned" option is checked.

    I have the same problem.
    The option "Total Spent & Total Value Owned" is activated, but the order history don't show the total.

  • AtiAti Posts: 9,143
    edited January 2017
    AndyS said:

    That's still not useful.

    First: it of cause has to consider the PC status. I'm as non-member get cought by your tool to realize that all is NOT true.
    Example: Today you show Hip-Hop outfit for 58% off. But in the shop it only displays as 40% off.

    Sorry, but I feel cheated.

     

    Like it's been said many times in this very thread, the price history displays PC+ prices. And like it's also been said many times in this very thread, a chart that displays NON-PC+ prices is coming soon. I even said this in the very post you just quoted.

    There's nothing else I can do at this point, but keep repeating myself.

     

    AndyS said:

    Second: The total spent display.
    How should that work. I can't find a corresponding parameter in the settings to let the total sum being displayed.
    Could you please attach some kind of manual? Some screenshots ?

    It's the very first parameter in the options tab, labeled "Total Spent & Total Value Owned". It's a checkbox that is either checked (enabled) or not checked (disabled).

    This is what it looks like when enabled:



    And this is what it looks like when it's disabled:



    For more screenshots, please see my original announcement post about these features: http://www.daz3d.com/forums/discussion/comment/1892921/#Comment_1892921

    enabled.png
    274 x 36 - 35K
    disabled.png
    260 x 36 - 35K
    Post edited by Ati on
  • AtiAti Posts: 9,143
    AndyS said:
    Ati said:

    Where do you find the total? I can't seem to find it anywhere.

    On your "Orders" page. (Little blue man in top right corner -> Orders) https://www.daz3d.com/sales/order/history

    You need to enable it first. It is off by default. To enable, click the addon icon in your browser to open the options page, and make sure the "Total Spent & Total Value Owned" option is checked.

    I have the same problem.
    The option "Total Spent & Total Value Owned" is activated, but the order history don't show the total.

    Disable it, and then enable it again.

  • AtiAti Posts: 9,143

    Question time. I see this pop up in many threads throughout the forum today. Encrypted items.

    Some of you use my "mark encrypted items" userscript, which marks encrypted items in category pages like this:



    and in the cart like this:

    so you don't miss the fact that a product is encrypted.

    With so few encrypted products popping up lately, I thought this script would simply die out. However, the encrypted items seem to have gathered strength and are back again.

    Question: is this something you would like to be ported over to the addon, or is the userscript version of it enough?

  • Ati said:

    Question time. I see this pop up in many threads throughout the forum today. Encrypted items.

    Some of you use my "mark encrypted items" userscript, which marks encrypted items in category pages like this:



    and in the cart like this:

    so you don't miss the fact that a product is encrypted.

    With so few encrypted products popping up lately, I thought this script would simply die out. However, the encrypted items seem to have gathered strength and are back again.

    Question: is this something you would like to be ported over to the addon, or is the userscript version of it enough?

    I'd like to see it ported over, and have an option to add such items to the hidden items list automatically.

  • I've lost the link for the Wishlistify ++, and I've searched the forums, but am comming up blank, does anyone have that?

  • AtiAti Posts: 9,143

    I've lost the link for the Wishlistify ++, and I've searched the forums, but am comming up blank, does anyone have that?

    http://civilizationhunt.com/ds/wishlistifyplus.html
     

  • hphoenixhphoenix Posts: 1,335
    Ati said:

    Question time. I see this pop up in many threads throughout the forum today. Encrypted items.

    Some of you use my "mark encrypted items" userscript, which marks encrypted items in category pages like this:



    and in the cart like this:

    so you don't miss the fact that a product is encrypted.

    With so few encrypted products popping up lately, I thought this script would simply die out. However, the encrypted items seem to have gathered strength and are back again.

    Question: is this something you would like to be ported over to the addon, or is the userscript version of it enough?

    I'd like to see it ported over, and have an option to add such items to the hidden items list automatically.

    Seconded!  This would be an excellent addition to the addon.....

     

  • Thank you, Ati! 

    And I third the motion!

     

  • DanaTADanaTA Posts: 13,264
    Ati said:

    I've lost the link for the Wishlistify ++, and I've searched the forums, but am comming up blank, does anyone have that?

    http://civilizationhunt.com/ds/wishlistifyplus.html
     

    What exactly does that do?

    Dana

  • AtiAti Posts: 9,143
    DanaTA said:
    Ati said:

    I've lost the link for the Wishlistify ++, and I've searched the forums, but am comming up blank, does anyone have that?

    http://civilizationhunt.com/ds/wishlistifyplus.html
     

    What exactly does that do?

    Dana

    It lets you filter any page to only show your wishlisted items.

    But it's coming to the addon soon (my development version already has it, it is being tested right now), no more need to click on bookmarklets, or having to load them every time you want to use that filter.

  • DanaTADanaTA Posts: 13,264
    Ati said:
    DanaTA said:
    Ati said:

    I've lost the link for the Wishlistify ++, and I've searched the forums, but am comming up blank, does anyone have that?

    http://civilizationhunt.com/ds/wishlistifyplus.html
     

    What exactly does that do?

    Dana

    It lets you filter any page to only show your wishlisted items.

    But it's coming to the addon soon (my development version already has it, it is being tested right now), no more need to click on bookmarklets, or having to load them every time you want to use that filter.

    Oh, OK.  Thanks!

    Dana

  • barbultbarbult Posts: 24,871

    @Ati, would you consider putting your affiliate link in your signature? I always have a hard time remembering how to find it, and so I often forget to click it before buying.

  • AtiAti Posts: 9,143
    barbult said:

    @Ati, would you consider putting your affiliate link in your signature? I always have a hard time remembering how to find it, and so I often forget to click it before buying.

    Although the forum Terms of Service does not explicitly say so, I believe that would violate it. The first link in my signature links to a page that has the Daz ad banner on it with the affiliate link.

  • barbultbarbult Posts: 24,871
    Ati said:
    barbult said:

    @Ati, would you consider putting your affiliate link in your signature? I always have a hard time remembering how to find it, and so I often forget to click it before buying.

    Although the forum Terms of Service does not explicitly say so, I believe that would violate it. The first link in my signature links to a page that has the Daz ad banner on it with the affiliate link.

    OK, I wouldn't want you to get into any trouble. I hope I can remember.

This discussion has been closed.