• kautau@lemmy.world
    link
    fedilink
    English
    arrow-up
    9
    ·
    5 days ago

    Got it, I looked through the source code earlier. It seems pretty straightforward. Auth and storage through Supabase.

    Basically intends to make money the same way Honey does, by affiliate linking you to “alternative” online shops with the same thing you’re looking for.

    Though like most tech things, the value is really in the collected browsing data which will probably be acquired

    • serenissi@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 days ago

      how did you reverse the source? it’s some bundled react app it looks. I’ve little experience with these. can you share brief procedure?

      • kautau@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        4 days ago

        Sure, the extension is a zip that can be downloaded, and you’re correct, it’s an injected react app.

        Generally, you can just beautify / format JS in your editor to get a better look

        If that doesn’t work, usually https://lelinhtinh.github.io/de4js/ is helpful

        This is also certainly one of the places where AI has better application than most of how it’s used today

        Most of the actual logic occurs in popup.bundle.js but there’s a number of files

        But skipping through the boilerplate react and webpack stuff you can find the Supabase specific-code

        Without even beautifying one of the smaller files you immediately see

        And then in the popup code you see

        So it’s definitely just showing you affiliate links to fund itself from what it considers “ethical” alternatives. I also saw Posthog in there which they are using for analytics, but it looks like

        It’s configured to not capture each pageview you go to, so it’s not tracking every site you’re on, it looks like only if you’re browsing amazon or ebay based on the background runner code: