LBTimer

Based on discussion in the LB Facebook group, I looked into this a bit and I'd caution others about installing it. Though coming with a GPL license; the extension author has run the source through an obfuscater to make it difficult for anyone to work on it, even before making payments mandatory, based on what I'm seeing in the old versions. The recent Firebase conversion is what makes using this extension worrisome; I'm not sure if this image will attach to the review, but here's some of the information it sends: https://ibb.co/6spVW0d. If that doesn't load, it shows the following going to the extension author's personal Firebase: - all of your time task data - all of your settings - all account information Google has associated with you, like your full name, email, picture. - *the search queries urls you visit* The latter is asked for in a permissions dialog, but there is nothing that asks whether you want to send the queries you're rating to the author. Lionbridge has been very clear this extension is forbidden to be run, even though many users have taken the risk anyway. However, sending the query URLs is a clear and indefensible violation of the NDA. When the data was in Google Drive, it was only visible to you and this wasn't as much of an issue. The extension author removed that feature, switching to the current Firebase, that gives him access to everyone's data, with the justification it's "more performant". Both services are run by Google, but only the latter removes your own access to your data. Obviously this is part of the subscription service, and when I engaged the extension, it gave permission denied errors without having one. Additionally, all of your data is stored in plaintext within the database as you can (hopefully) see from the image, accessible to the author with the click of a mouse. Given the extension has permissions to run on the time sheet portal (Ultipro) where your social security and other financial information is and the author's willingness to put profit over user's utility, I'd also be concerned about having this installed for that reason. Even if the author never personally does anything nefarious, there's nothing preventing him from selling it to someone who will. I'm personally disappointed to see someone prey on the rater community, given how much else we've had to deal with lately. Since the GPL presumably grants this open source status, maybe someone will defang an older version and release it to the community. Or Tellus will fire the lot of us and make this and its usage irrelevant. If you're in the group, feel free to DM me (Dex) with any questions.

I installed this because it looked like it'd be helpful, but you can't even try it without paying, and after you've installed it, it asks for a whole lot of permissions. It looks like it tries to send all your work data into the author's firebase! From what I can see it used to store it in your local Google Drive appdata and the author changed this before making it a subscription? But without paying you can't even see if it'll properly store the submitted data. I was willing to take the risk using this despite it being explicitly listed by Lionbridge as disallowed but it's so lame there isn't even a basic mode you can test with. This is in addition to it being just after the holidays and some weeks now with barely any tasks. This extension just keeps popping up a thing for payments instead of doing anything useful. The search continues!

I love it, but apparently won't be able to use it with the new LB extension!?? :(