back to article Don't worry, it'll be all Reich! Googler saves Grammarly nazis from hacker invasion

A critical flaw in the Chrome extension of Grammarly – the grammar-checking software with online ads second only to Geico in terms of their ability to annoy – has left all 22 million users' personal records available to all. The vulnerability, spotted on February 2 by Google Project Zero's Tavis Ormandy – allows any website to …

  1. benoliver999

    Surprise surprise

    Turns out that putting everything you ever type through a third party service probably isn't a great idea.

  2. ds6 Silver badge

    They called me crazy...

    I once asked a coworker why they had installed Grammarly on all their devices. My argument was four-fold: a) why not use the stock error correction that comes with your web browser/phone keyboard/etc.; b) how can you trust a third-party service with what you type; c) how about learn to type better; and d) personally if I made a typing mistake, I would want it to be my fault and not a machine's—t. everyone that complains about autocorrect.

    The response I got was equally as numerous but far less nuanced, probably speaking to why she needed the correction software in the first place: a) it sucks; b) what could go wrong; c) expletive; and d) who cares?

    I was then called a lunatic for my opinions. I wish I was still working there so I could rub it in her stupid face how unsafe the application was—but then again, she probably would have made the argument "it didn't happen to me so there's no problem" and keep right on using it!

    1. joed

      Re: They called me crazy...

      OTOH, I would not be surprised if any of MSO and Windows native spellchecks have been integrated with MS cloud (including Bing/Cortana). Even their on screen and touch keyboard has key logger capability (to facilitate text text prediction/correction) and trying to clear the history - sure as hell it would try to help with opening password manager's database - is not particularly trivial, who knows what happens when user logged on with MS account. I only accept local and dumb dictionary tools not affiliated with any cloud provider.

    2. Stevie
      Pint

      Re: They called me crazy...

      "why not use the stock error correction that comes with your web browser/phone keyboard/etc"

      E-beer for your Alanis Morissette Award winning post.

  3. RyokuMas
    Stop

    "Googler saves Grammarly nazis from hacker invasion"

    ... with a four-day turn round from reporting to patch release. Am I the only one concerned by the speed of this, and whether or not it has been properly tested?

    With that in mind, it's probably a bit premature to say "Google saved" anyone from anything.

    1. This post has been deleted by its author

    2. Anonymous Coward
      Anonymous Coward

      Yes, but by having a bug hunter/hacker on your payroll, pointing out everyone else's flaws, it distracts from the multi-billion dollar data-slurping privacy-invading maggots that are Google.

  4. Killfalcon Silver badge

    "Second only in annoyance to GIECO"

    Clearly, you've not been getting the same Udemy adverts I've been getting.

  5. handleoclast

    Grammarly adverts work!

    A few months ago Youtube found a way around AdBlock Plus so I kept seeing shitloads of Grammarly ads. They worked. They compelled me to find another way of blocking annoying ads and I'm now a very contented user of uBlock Origin. Had their adverts not been so intrusive and annoying I might not have bothered looking for an alternative to ABP and simply put up with them.

    Oh, and Grammarly has made its way onto my list of products I would never buy or use and would strongly recommend others never to buy or use. I cannot repeat that strongly enough: avoid Grammarly at all costs.

    So Grammarly adverts certainly changed my way of thinking and modus operandi. They work!

  6. tiggity Silver badge

    I avoid Grammarly (and similar)

    Because I don't really care if I make the odd typo or other error in bits of throwaway personal use text (like this) so long as gist is apparent.

    Anything that matters, I type in word processor and it will get examined by (inbuilt non cloudy) spell / grammar checking tool of word processor I use.

  7. strum

    And the first advert shown in this item was for...Grammerly.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon