LBTimer

Dexter Athferth

2021-01-09

Based on discussion in the LB Facebook group, I looked into this a bit and I'd caution others about installing it.

Though coming with a GPL license; the extension author has run the source through an obfuscater to make it difficult for anyone to work on it, even before making payments mandatory, based on what I'm seeing in the old versions.

The recent Firebase conversion is what makes using this extension worrisome; I'm not sure if this image will attach to the review, but here's some of the information it sends: https://ibb.co/6spVW0d.

If that doesn't load, it shows the following going to the extension author's personal Firebase:

- all of your time task data
- all of your settings
- all account information Google has associated with you, like your full name, email, picture.
- *the search queries urls you visit*

The latter is asked for in a permissions dialog, but there is nothing that asks whether you want to send the queries you're rating to the author.

Lionbridge has been very clear this extension is forbidden to be run, even though many users have taken the risk anyway. However, sending the query URLs is a clear and indefensible violation of the NDA.

When the data was in Google Drive, it was only visible to you and this wasn't as much of an issue. The extension author removed that feature, switching to the current Firebase, that gives him access to everyone's data, with the justification it's "more performant". Both services are run by Google, but only the latter removes your own access to your data. Obviously this is part of the subscription service, and when I engaged the extension, it gave permission denied errors without having one. Additionally, all of your data is stored in plaintext within the database as you can (hopefully) see from the image, accessible to the author with the click of a mouse.

Given the extension has permissions to run on the time sheet portal (Ultipro) where your social security and other financial information is and the author's willingness to put profit over user's utility, I'd also be concerned about having this installed for that reason. Even if the author never personally does anything nefarious, there's nothing preventing him from selling it to someone who will. I'm personally disappointed to see someone prey on the rater community, given how much else we've had to deal with lately.

Since the GPL presumably grants this open source status, maybe someone will defang an older version and release it to the community. Or Tellus will fire the lot of us and make this and its usage irrelevant. If you're in the group, feel free to DM me (Dex) with any questions.

Mayla Martínez

2020-11-09

I love it, but apparently won't be able to use it with the new LB extension!?? :(

Cameron P.

2020-03-16

Missing Time and Time on Wrong days. Still waiting on extension developer to get back with me on several occasions that I have detected missing/deleted time and time on wrong days. Check support tab for info. I would highly recommend running a backup time logging extensions because of this. TickyTimer also has an extension that auto logs for Yukon and free. Just google search it.

Miguel Cardoso

2020-02-26

New rater here, and this extension is saving my life!

Jeff Neal

2020-01-22

Indispensable tool for raters. Subscription pays for itself many times over in increased productivity.