Slashdot Mirror


Google Starts Charging a Signup Fee For Chrome Extension Developers

trooperer writes "On Thursday, Google introduced two significant changes in the Google Chrome Extensions Gallery: a developer signup fee and a domain verification system. The signup fee is a one-time payment of $5. The announcement says its purpose is to 'create better safeguards against fraudulent extensions in the gallery and limit the activity of malicious developer accounts.' Developers who already registered with the gallery can continue to update their extensions and publish new items without paying the fee." Google also made available a developer preview for the Chrome Web Store.

132 comments

  1. say... by fattmatt · · Score: 4, Funny

    how do you like them apples?

    1. Re:say... by Anonymous Coward · · Score: 0

      so do we do Ggle or Googl€ now?

    2. Re:say... by game+kid · · Score: 1

      so do we do Ggle or Googl€ now?

      Gigolo. Pay up to Feel Lucky, wink wink.

      --
      You can hold down the "B" button for continuous firing.
    3. Re:say... by Anonymous Coward · · Score: 1, Insightful

      I don't, so I can host my app on my own website free of charge.

    4. Re:say... by Anonymous Coward · · Score: 1, Insightful

      *shrug* I can still publish my .crx on my own site. Nothing really changes.
      But it does point to a flaw of sorts in Chrome extensions. The security model is not nearly granular enough. Since almost any non-trivial extension will, according to Chrome, need access to all your browser data and whatnot, users desensitise to that and thus it becomes easy for crap to go unnoticed. Think about it: if all plants on the planet looked like soldiers, soldiers wouldn't need camouflage.
      So it's a half-assed social solution to a technical problem.

    5. Re:say... by Anonymous Coward · · Score: 0

      I like it them apples plenty. keeps out the riff raff.

    6. Re:say... by _KiTA_ · · Score: 0

      how do you like them apples?

      Considering Apple charges $99 in comparison to Chrome's $5? Pretty darn good, actually.

    7. Re:say... by Sir_Lewk · · Score: 1

      Getting kicked in the shin is a lot better than getting kicked in the nuts, but both suck.

      --
      "linux is just DOS with a UNIX like syntax" -- Galactic Dominator (944134)
    8. Re:say... by mysidia · · Score: 3, Informative

      Last I checked Apple does not charge for the ability to develop Safari extensions and have them appear in the extension gallery.

      I believe you must be thinking of something different Apple charges for; you don't need a WWDC subscription to write safari browser extensions and publish.

    9. Re:say... by SanityInAnarchy · · Score: 1

      you don't need a WWDC subscription to write safari browser extensions and publish.

      Nor do you need this $5 fee -- it's entirely possible to host a Chrome extension yourself, have it auto-update yourself, and all the mechanisms to do this are already in place.

      --
      Don't thank God, thank a doctor!
    10. Re:say... by mysidia · · Score: 1

      Right... but Apple doesn't charge you a $5 or more fee to have your extension submitted to their gallery.

      They can accept or deny it, but you don't pay anything to Apple, it's free (currently).

      Now what you may pay is webhosting; for your extension's website and download servers.

    11. Re:say... by Anonymous Coward · · Score: 0, Informative

      is a lot better than getting kicked in the nuts

      Some people like it. Can't say it is something I would try, but if you can't lick it, beat it... isn't that how it goes?

  2. Never fails... by ibsteve2u · · Score: 1, Interesting

    Seems like I always learn about a new fee two days after the deadline for "free" expires.

    --
    Orwell: "In a Time of Universal Deceit, telling the Truth is a Revolutionary Act"
    1. Re:Never fails... by Aladrin · · Score: 1

      That's kind of the point, isn't? They are rewarding the early adopters.

      --
      "If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
    2. Re:Never fails... by node+3 · · Score: 2

      That's sort of like saying that you always find something you've lost in the last place you look. That's because once you find it you stop looking.

      You generally don't hear about new fees for previously free services until after they're announced because they usually only tell you about them after they implement them.

    3. Re:Never fails... by InsertWittyNameHere · · Score: 1

      Obviously Google desperately needs the emense influx of cash that a one-time $5 fee per new extension developer account will bring in that they couldn't afford to tell anyone before hand. The end is near! Sell your Google stock now!

    4. Re:Never fails... by PopeRatzo · · Score: 1

      Seems like I always learn about a new fee two days after the deadline for "free" expires.

      Five dollars!? Why that's an outrage! If I were you, I wouldn't pay it.

      {who knows what movie that's from? Without a-googlin'...}

      --
      You are welcome on my lawn.
    5. Re:Never fails... by Abstrackt · · Score: 1

      That's kind of the point, isn't? They are rewarding the early adopters.

      They're not rewarding the early adopters, they've just been grandfathered. Could you imagine the fallout if Google came asking everyone who already had an account for cash? Though I do find it odd that they picked $5 if it's just to create better safeguards. Why not $1 instead?

      --
      They say a little knowledge is a dangerous thing, but it's not one half so bad as a lot of ignorance. - Terry Pratchett
    6. Re:Never fails... by dissy · · Score: 0, Offtopic

      That's sort of like saying that you always find something you've lost in the last place you look. That's because once you find it you stop looking.

      I always look another two or three places after I find what I am looking for, just to mess with peoples minds.

    7. Re:Never fails... by Hadlock · · Score: 2, Informative

      It would be nice if they waived fees for people who have had active gmail accounts for > 4 years, or something like that. Any geek worth their salt has had an account since mid-2005. I'm no developer, but I've tinkered around with extensions before in the past, just to see what they can do. Had there been a $5 fee in place, I'd have never jumped that hurdle to just poke around with the code.

      --
      moox. for a new generation.
    8. Re:Never fails... by mysidia · · Score: 1

      They are not rewarding the early adopters. They are penalizing everyone who hasn't published an extension yet.

      If you wrote the code and haven't gotten the account to publish to the gallery yet, then you are screwed over by the $5 fine/penalty.

      Charging everyone a $5 penalty as a way to "deal with" the 3 or 4 script kiddies kind of sucks.

      All a malware author needs is a couple dozen people to install their malicious app and get critical info snooped, or snooker the user into paying more, they will easily get PROFIT after the $5 fine.

      On the other hand, for us folks writing free apps, the $5 fee is kind of debilitating. I think we will stick with browsers whose authors are less hostile to developers, such as Firefox.

    9. Re:Never fails... by Anonymous Coward · · Score: 0

      Any geek worth their salt has had an account since mid-2005

      Err, not really. OK, I admit, many years ago I did go and sign up for (via the invite process) a Gmail account. I never used it though. I already had two ancient Yahoo Mail accounts, plus various organisational accounts. Now I have as many email addresses as I want via three domains that I "own".

      So, let's fix your quote for you...

      Any geek worth their salt has their own domain and as many email addresses as they like via that

      Why isn't Gmail a sign of "geek-hood"? Because anyone can do it. And, geeks don't like others being in control of their stuff. I don't like, or trust any corporation. Google is no better. (Yes, I still use the two ancient Yahoo Mail accounts. However one has basically been retired, and is kept merely for the odd thing that still comes in. The other is in the process of being retired, and has been for a couple of years now. Because it has been the account to contact me on since 1999 though, it's tough.)

    10. Re:Never fails... by Anonymous Coward · · Score: 0

      Corporations made that computer you are using. Corporation provide that internet access you use. Corporations provide the domain names that you registered. Corporations provide that power that you use. Corporations built that house you live in. Corporations made the clothes that you wear. Corporations provide the food that you eat.

      To say that you don't like or trust any corporation is juvenile.

    11. Re:Never fails... by ShooterNeo · · Score: 1

      I just checked my gmail...account open since November 2004...

      I remember waiting for months to get an invite.

  3. So what? by Anonymous Coward · · Score: 4, Insightful

    So you have to pay a fee to register an extension with them. So what?

    I mean, ok, yes, I can see why I might prefer to be listed in Firefox's extension gallery for free, but there's nothing stopping me from distributing the extension on my own, via a third party.

  4. $5 - that Microsoft, Apple and Oracle beaten by Captain+Kirk · · Score: 1, Troll

    Seriously, what kind of developer would even notice a $5 charge? Even modestly successful apps make over $500 per day.

    1. Re:$5 - that Microsoft, Apple and Oracle beaten by Lifyre · · Score: 1

      Web browser extensions not applications. But your point about noticing the charge stands.

      --
      I'll meet you at the intersection of "Should be" and "Reality"
    2. Re:$5 - that Microsoft, Apple and Oracle beaten by Anonymous Coward · · Score: 0

      You do understand that by paying google this nominal fee to enter the "market", isn't a money grab, but a paper trail to thieving scammers? (just as long as it's not from OTC/PPCs or payscampal.

    3. Re:$5 - that Microsoft, Apple and Oracle beaten by hedwards · · Score: 1

      Kids and those that are in parts of the world where they can't send money to the US.

    4. Re:$5 - that Microsoft, Apple and Oracle beaten by cynyr · · Score: 1

      and they dev chome extensions? or are busy working in sweat shops? right... now i'd rather they didn't work there, but i'd like them to get a bit of food...

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
    5. Re:$5 - that Microsoft, Apple and Oracle beaten by Anonymous Coward · · Score: 0

      $182,500 a year is only "moderately successful". Wow. How much are "wildly successful" extensions making?

    6. Re:$5 - that Microsoft, Apple and Oracle beaten by bm_luethke · · Score: 1

      And that is the whole point - for a legitimate user it is a one time irrelevancy. For a malicious intent it is probably not worth it not to mention the paper trail.

      Nor is it intended to be "prevent" it from occurring but slow down the rate. It is just intended to add a high enough barrier that it *mostly* isn't worth it. It's like having a guard dog, house alarm system, and a myriad other things - its is easier and more effective to go somewhere else. More often than not it's just goofing off and having to pay (and give valid Credit Card information tracked to you) is going to have them go elsewhere. Stolen credit cards cost money, time, and often do not work.

      It's a fairly decent move. The system is still open - you can make all you want and server them from your own web-page. If you want access to their "store" (market, repository, whatever you ant to call it) then you pay a one time truly minor fee. Its probably just enough to cover their costs of having a paper trail and the amount is *not* going to be a factor for *anyone* making a real extension (if it is then I doubt that you are going to spend the time making said extension). Some may balk at the whole idea, but at five dollars it is obviously just to get the paper trail and have the "protection" from submissions suddenly not being anonymous.

      --
      ------- Sorry about the spelling, I suffer from two problems. Dyslexia makes it difficult to spell well, lazy makes it
    7. Re:$5 - that Microsoft, Apple and Oracle beaten by Draek · · Score: 1

      Seriously, what kind of developer would even notice a $5 charge?

      The kind that makes his work available to all for free.

      Not that this is a huge problem for them, mind you, as they can easily host their software elsewhere and it'll still Just Work(tm), unlike Apple's (far more expensive) iThingie walled garden, but not everyone develops browser extensions with a commercial purpose and for those that don't, the difference between $0 and $5 is much larger than that between $5 and $10.

      --
      No problem is insoluble in all conceivable circumstances.
    8. Re:$5 - that Microsoft, Apple and Oracle beaten by Anonymous Coward · · Score: 0

      Even modestly successful apps make over $500 per day.

      WHAT ?! I really need to quit my job and write modestly successful apps and get over $500 per day.

    9. Re:$5 - that Microsoft, Apple and Oracle beaten by Anonymous Coward · · Score: 0

      They can get someone else to pay the $5 for them. If the extension is any good I'm sure they'll find someone generous enough to donate the fee. Kids can and should turn to their parents for this, it is only $5 and any good parent would help their child with this.

    10. Re:$5 - that Microsoft, Apple and Oracle beaten by Anonymous Coward · · Score: 0

      wow. it means you have to go to taco bell tonight instead of MacDonalds so you can do the one time cost with google
      its the end of the fucking world

  5. Extortion! by oldhack · · Score: 5, Funny

    I won't budge until they drop the fee to 4.99.

    --
    Fuck systemd. Fuck Redhat. Fuck Soylent, too. Wait, scratch the last one.
  6. The $5 ... by WrongSizeGlass · · Score: 4, Insightful

    The $5 is probably a way for them to be able ID anyone who wants to sneak malicious code into an extension. If they have your CC number they have a pretty good way of knowing who you might be. If they took cash the $5 wouldn't stop anyone who wanted to poison their extension. A verifiable electronic payment will prevent most of those who might try it.

    1. Re:The $5 ... by Sethus · · Score: 3, Insightful

      Good idea in theory, but I'd be willing to guess, it would be very easy to provide a stolen credit card for this information.

      --
      Posting with out proof reading since 2001.
    2. Re:The $5 ... by Anonymous Coward · · Score: 0

      what about visa gift cards...those work the same as credit cards and can also be loaded with cash

    3. Re:The $5 ... by Anonymous Coward · · Score: 0

      No, no it isn't. Temporary credit cards and stolen credit cards are commonly used by the same people who sneak malicious code into an extension.

    4. Re:The $5 ... by Anonymous Coward · · Score: 1, Funny

      Duh. Google can just google to see if a credit card was stolen or not.

    5. Re:The $5 ... by Threni · · Score: 1

      Not if they posted a code to the card's billing address which you needed to enter online to confirm you're the cardholder.

    6. Re:The $5 ... by Kumiorava · · Score: 1

      That will be found out sooner or later when charges start to appear to credit card bills. Even if the person behind the credit card is not known the account can be declared tainted. Google will be able to revert any actions from that account and keep the system more safe.

    7. Re:The $5 ... by dallaswebdesign · · Score: 1

      Of course this isn't fool proof. It's like locking the door to your house when you leave. Anyone who really wants to break into your house is just gonna smash a window - but you still lock you door behind you to keep some random kid from just walking in and trashing your house.

    8. Re:The $5 ... by Sycraft-fu · · Score: 5, Insightful

      It is also a good filter against random trouble makers.

      Rich Kaynka (Something Awful) actually talked about this that you get some people, kids in particular, with a lot of time on their hands who will spend it making life difficult for you. In his case it was someone repeatedly spamming stupid shit on the forums. One thing that does a nice job of eliminating that is a small charge. Reason is that you have to be at least somewhat serious to be willing to pay that.

      As you said, it wont' stop someone who really wants to make an evil extension (though verifiability helps with that), but it'll probably stop people who just want to be a pain in the ass and submit lots of stupid and/or non functional extensions to try and cause trouble. It's easy to create hundreds of bogus accounts and post crap with them. It is hard to spend hundreds of dollars to do the same.

    9. Re:The $5 ... by rm999 · · Score: 3, Insightful

      Stolen credit cards aren't cheap.

      You are both right. It's not a foolproof preventative measure, but it is a small effort that stops petty criminals and hinders large-scale criminals.

    10. Re:The $5 ... by hedwards · · Score: 1

      What normally happens is that Google would refund the money, probably losing some money in the process, which since there main objective is figuring out who people are is just fine. At $5 a developer, they shouldn't have any trouble handling these eventualities without losing money.

    11. Re:The $5 ... by hedwards · · Score: 1

      That's true, however as soon as the owner of the card reports it to Google as fraudulent, they know to pull the extension. Which is the point of this after all, the money isn't important so much as knowing who you're dealing with.

    12. Re:The $5 ... by fermion · · Score: 1
      If all they want to do is verify identify that can just run a dollar. This is what most people do.

      The five dollars has to be to cover costs, which is fair. One wonders, however, why Chrome is such a risk that it can't use the same model as firefox. I suppose it is simply that Google has to protect itself since Chrome is it's products. They have to create a closed garden to insure security.

      --
      "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
    13. Re:The $5 ... by MessyBlob · · Score: 1

      I was about to post something similar to this parent (saved my typing!), so I'll just add a 'diff': $5 won't stop someone trying to make 10,000 times that in a scam.

    14. Re:The $5 ... by Firehed · · Score: 1

      It's easy for credit card processors to block prepaid cards. There's also several different types of them, so that's not necessarily relevant anyways.

      --
      How are sites slashdotted when nobody reads TFAs?
    15. Re:The $5 ... by gamricstone · · Score: 1
      I agree, and despite naysayers who bring up identity theft I think it is a good move. Identity theft is a crime, one which probably gets more police attention than malicious code in free browser extensions. My knee-jerk reaction was to oppose fees to release free extensions for browsers but thanks to your post I've changed my tune.

      I still won't be switching to chrome. Why? Noscript, adblock (better in firefox I hear), and a few minor add-ons which I could live without without.

      --
      The economic anarchy of capitalist society as it exists today is, in my opinion, the real source of the evil. - Einstein
    16. Re:The $5 ... by Anonymous Coward · · Score: 0

      Good luck getting one without your name and SSN attached. Really, it seems quite impossible. (I have seen a few people claim it didn't used to be, but the government got a lot stricter since 9/11.)

    17. Re:The $5 ... by Anonymous Coward · · Score: 0

      ok. but it would be better if they gave the money to some charity.

    18. Re:The $5 ... by Anonymous Coward · · Score: 0

      It makes sense that a botnet would have no trouble stealing credit card numbers and that a black hat would probably have relatively easy access to some stolen credit card numbers.

      That said, don't people report credit card fraud? It might take a month or so until the person actually has to pay their credit card bill, but is it really that common for people to just not look at what they are paying for that hackers can expect to get away with that?

      Then again, if the $5 were paid and the fraud were not reported for over a month, then the black hat could probably do some significant damage in the meantime.

    19. Re:The $5 ... by Anonymous Coward · · Score: 0

      That's hilarious and at the same time insightful.

    20. Re:The $5 ... by mlts · · Score: 1

      Every visa gift card I've encountered requires a lot of identifying info that gets cross-referenced. Give a wrong name? Good luck trying to use the card for the next purchase. The days of anonymous visa cards are long gone.

    21. Re:The $5 ... by martin-boundary · · Score: 1, Interesting
      Google is a tech company with an army of phds, and the best they can come up with is a supposed economic solution to spam filtering? I find that idea highly suspicious.

      It's literally trivial to automatically filter out grossly nonfunctional extensions: run chrome in a sandbox, load the submitted binary blob or extension, and check some error codes or a log file. Frankly, if their software engineers can't do this, then they don't deserve to be called that. Now after that initial filtering step, you can get humans involved to look at only those submissions that passed the test.

      Posting a message on a forum requires zero knowledge/skills from the poster, whereas even a trivial software extension that loads properly is beyond the vast majority of people with time to kill. That's a major barrier to entry that's already much more effective than a posting fee.

    22. Re:The $5 ... by Anonymous Coward · · Score: 0

      The $5 is probably a way for them to be able ID anyone who wants to sneak malicious code into an extension. If they have your CC number they have a pretty good way of knowing who you might be. If they took cash the $5 wouldn't stop anyone who wanted to poison their extension. A verifiable electronic payment will prevent most of those who might try it.

      Yes, it is a way for them to ID you. Now, imagine someone in the CC/identify theft 'business' wants to join in the program. Would he have a problem billing someone else he stole the data from the $5? Would this someone notice a $5 charge?

      Apple charges $99/year for their developer program, and I doubt their first motive was to get rich with it. It's because that ID is more reliable when the sum would be noticed by a defrauded CC owner.

    23. Re:The $5 ... by DeadPixels · · Score: 1

      I agree that this is probably part of it, but it's also probably to discourage people from registering tons of fake/malicious accounts to make malicious extensions. It's like the idea of charging a fee to send email - the reasoning there being that if it cost spammers even $0.01 per email, they'd cut down the volume to avoid losing money.

    24. Re:The $5 ... by shacky003 · · Score: 1

      People keep talking about using stolen CC's, etc.. how about going to your local grocery store (or mass retailer) and buying a $25 prepaid card to use?
      You can put any info at all in the registration site for them (for when sites use AVS to check the card.)
      You don't need stolen numbers when it's easier to grab a fraud-b-easy card while picking up milk...

    25. Re:The $5 ... by uvajed_ekil · · Score: 1

      The $5 is probably a way for them to be able ID anyone who wants to sneak malicious code into an extension. If they have your CC number they have a pretty good way of knowing who you might be.

      Uh, then you use a pre-paid Visa or Visa gift card that is purchased anonymously with cash. System broken. If you indeed wanted to sneak in malicious code, you would certainly take a simple step or two to protect your identity.

      --
      This is a hacked account, for which the owner can not be held responsible.
    26. Re:The $5 ... by NemoinSpace · · Score: 3, Funny

      Don't give slashdot any ideas. I post stupid shit to the forums all the time.

    27. Re:The $5 ... by larry+bagina · · Score: 1

      What about kuro5hin? Rusty put up a $5 paywall for the same reason. The result: a significant drop in new users. There are only 3 people willing to pay $5; two of them are mentally deranged kooks who invariable get banned after shitting all over for a month or two. The other was responsible for the $5 fee in the first place.

      --
      Do you even lift?

      These aren't the 'roids you're looking for.

    28. Re:The $5 ... by Anonymous Coward · · Score: 0

      If they set the bar that high, they will be losing legitimate developers who can't be bothered to jump through hoops.

      Why is this even necessary? Firefox is a much bigger target than Chrome, but it simply hasn't been attacked in any way that would justify this kind of move. (Arguably, even IE hasn't been, since we're talking about extensions delivered through a central official extension distribution site, not inherently untrustable drive-by stuff installed by some random page you visit.)

    29. Re:The $5 ... by fluffy99 · · Score: 1

      No, its to address the same problem that Apple had. Shady developers were registering the same application hundreds of times under slightly different names, looking to increase the likelyhood that some dumb schmuck would like the name enough to spend a few bucks for the app. It got so bad with Apple that the vast majority of their apps in their store were the same rehashed garbage drowning out the handful of decent apps. Setting a fee to register an app or extension helps the "signal-to-noise" ratio quite a bit by making it financially unviable to do this type of mass spamming.

      $5 is pretty low in my opinion and probably doesn't even cover the cost Google is incurring to manage the registration and checkout process.

      As for the protecting the quality of the code, isn't the mantra that there are all these people out there reviewing the code for malicious intent?

    30. Re:The $5 ... by JackieBrown · · Score: 1

      It has adblock and now notscript

      https://chrome.google.com/extensions/detail/gighmmpiobklfepjocnamgkkbiglidom

      https://chrome.google.com/extensions/detail/odjhifogjcknibkahlpidmdajjpkkcfn

      I would no doubt that the firefox equivalents that have been around for 5 years probably work better, but these work well for me.

    31. Re:The $5 ... by mysidia · · Score: 1

      No... I would say it hinders petty criminals and has minimal effects on large-scale criminals.

      They would need to do more than simply charge a $5 fee to have an effective barrier.

    32. Re:The $5 ... by mysidia · · Score: 1

      They can't really do it, as that would effect m any legitimate developers.

      Many people do not have any credit cards, and use debit, or prepaid cards instead, for online transactions.

    33. Re:The $5 ... by Anonymous Coward · · Score: 1, Informative

      Stolen credit cards aren't cheap.

      Actually, they're free.

    34. Re:The $5 ... by mysidia · · Score: 1

      It is really more like this situation. Or this one. Or this one. Or this one. Or this one.

      As for houses, locks are to keep out wild animals and to help slow down a potential intruder. The burglar alarm, and devices like the .40 S&W and 9mm are supposed to be the real deterrants and defense against human threats.

      Specifically, the 2nd amendment of the constitution which guarantees the people the right to bear arms and defend themselves and their constitutionally protected rights, including the right to life, and the right to the security of their effects.

    35. Re:The $5 ... by mysidia · · Score: 1

      The average person does not have online access with their CC provider and a habit of constantly logging into their online account and refreshing the page every 30 seconds to look for any unusual $5 transactions they do not remember.

      Much of the population won't have a chance of knowing about the $5 charge until 30 days later when they receive their paper statements.

      Of those people..... many won't notice a $5 unexpected Google charge in there. If they do, they might not immediately realize this isn't something they (or their spouse bought) earlier in the month.

      Doubly so if they've ever actually bought anything from Google.

      Oh right.... 30 days is Plenty of time for a malicious extension to have attracted some people, got it installed, and done damage.

      In the off chance that the CC owner notices, just try again, repeat ad naseum.

    36. Re:The $5 ... by koiransuklaa · · Score: 1

      That's partly true but also quite like saying a $5 lock won't stop someone stealing your $1000 bike.In practice the thief will often just find an easier target -- another bike or something else altogether... The criminals aren't trying to make Chrome extensions, or even browser extensions, they're trying to make money. If the Chrome extension scam requires them to do CC fraudthey might just pick an easier target.

      In short, it's not about the resources the criminals have, it's about the opportunity cost of the scam.

    37. Re:The $5 ... by Anonymous Coward · · Score: 0

      There's a $25 fee for Android developers. Still there's plenty of stupid and/or non functional apps in the Android Market. And a few malicious ones (like http://mobile.slashdot.org/story/10/01/10/2036222/Malicious-App-In-Android-Market).

    38. Re:The $5 ... by adolf · · Score: 2, Interesting

      Pre-paid Visa cards are a cash-and-carry item at Wal-Mart. There is currently no ID verification required before they're usable.

    39. Re:The $5 ... by nurb432 · · Score: 1

      And the real crooks don't have access to other peoples credit cards or *gasp* pay per use visa/etc cards, right?

      --
      ---- Booth was a patriot ----
    40. Re:The $5 ... by gamricstone · · Score: 1
      Ah yes, progress is being made however it can't even block java applets 100% of the time. This is due to chrome's design, not incompetence on the part of the extension developer. It also does not block inline scripts unless you disable javascript yourself, then enable individual scripts as needed (via notscripts). I'm sure there are other differences which are purely cosmetic that I would need to get used to. For these reasons, and the fact that I like firefox, I won't be switching in the foreseeable future.

      http://optimalcycling.com/other-projects/notscripts/limitations/

      --
      The economic anarchy of capitalist society as it exists today is, in my opinion, the real source of the evil. - Einstein
    41. Re:The $5 ... by dallaswebdesign · · Score: 1

      Interestingly enough, your first link hit the nail on the head. That gate is not a security measure at all like the link makes it out to be. The gate is there to tell people that the airport is closed. To think that it was even slightly intended as a security measure is very naive.

      Google's signup fee was not meant as "real deterrant[sic] and defense against human threats". It was meant to keep "wild animals" (aka. script kiddies) from posting stupid malicious apps in the marketplace to jack with people.

      Also, where do you live where it's necessary to lock your door to keep wild animals out? You've got some smart critters in your area...

    42. Re:The $5 ... by adamdoyle · · Score: 1

      Typing in a number that is mailed to you is jumping through hoops? Have you ever been to the DMV?

    43. Re:The $5 ... by Snaller · · Score: 1

      Yeah, just like Blizzard having peoples CC numbers prevents gold farmers in World of Warcraft ... oh wait...

      --
      If Google really cared they would fix Android Chrome to reflow text, instead of discriminating
  7. Shows the attitude and some people may not have $5 by Ilgaz · · Score: 0, Troll

    It shows what you can expect from their so-called free and open source browser. In fact, everytime they do it, they prove GNU/FSF "nitpicking" about the FOSS and plain "open source".

    I don't want to make anyone feel guilty or cheap but I personally know some open source developers who can't even afford a $30 external disk and development stops until they get some kind of donation. Yes, popular too.

  8. Why not? by Anonymous Coward · · Score: 0

    Considering the bandwidth costs and the fact that (most?) extensions don't make them any money, it is a steal as a one-off payment at $5.
    The cost pays off in the end with less maintenance needs for making sure extensions are safe in the first place since it would be pretty trivial to find people through cards.
    Only the really smart ones will have stolen IDs, and in all honesty, the ones smart enough to get away with it deserve some kudos, even if they are dicks.

    What Google should do is make it easier to check the sources of extensions, make it more open. It's not like it will stop someone determined enough to copy others code anyway, so why not?
    At least this way people can easily scan the code and see if there is anything dodgy going on in the back.
    Maybe even let people comment on sections of code saying "you might not like this part since it does X / sends you to X on update / blocks X until you do Y" and so on.
    Of course, considering how there is barely a decent Userscript viewer / editor yet, i doubt that'll happen.

    Also, in general, you should be able to restrict what sort of content an extension has access to as well. (return null, blank fields, whatever, just so long as it won't break current extensions, make the return data a clean slate if someone blocks requests for something like history or whatever)
    This badly needs to be added already. And extensions seriously need to be forced to use only the data it needs.
    And with enough action from other developers on the store, hopefully, extensions can be reviewed by Google for stupid requirements, malicious code, etc.
    Still as likely to happen as Jupiter suddenly exploding.

    1. Re:Why not? by calzakk · · Score: 3, Insightful

      Considering the bandwidth costs and the fact that (most?) extensions don't make them any money

      Of course, extensions generally improve the browser, by providing features the browser doesn't. Firefox is a good example, which would quite likely be forgotten by many of its users if it weren't for it's many good extensions. Quite simply: more extensions, more users, more revenue.

  9. Re:ah the ipod thing by nacturation · · Score: 2, Insightful

    Paypal does same for same purpose and charges $1, to put it back in 24 hours. Does Google do it? Or they can't afford? (!)

    What does your post have to do with liking them apples? Anyways, in terms of money consider that had they implemented this program from day 1 they would have netted about $30,000 had every developer paid the $5, and those developers are getting grandfathered in for free. Obviously it's not about the money for them.

    --
    Want to improve your Karma? Instead of "Post Anonymously", try the "Post Humously" option.
  10. Re:Shows the attitude and some people may not have by Anonymous Coward · · Score: 0

    This has nothing to do with FOSS. You can still develop extensions without any limitations. If you want to list your extension on GOOGLE'S web site, you need to pay though. This does not seem unreasonable in the least.

  11. Really... by Ilgaz · · Score: 0, Troll

    So, black hats who dares to play around with Google giant's browser can't find a CC number to give to them.

    Sure... Man they could be using CC number printed papers as toilet paper.

    For example, this team/guy who coded this marvellous piece of evil software who controls 5 million computers via unbreakable, declared WONTFIX by security elite, zombie army will have hard time finding a $5 CC.
    http://en.wikipedia.org/wiki/Conficker

    If you have time, read all about it. "Get users credit card number" validation scheme is over. Completely over.

  12. Misleading title by Anonymous Coward · · Score: 0

    There's a fee to be in the Google gallary of extensions. There's no fee to develop plugins and advertise / host them yourself.

  13. Re:Browser EXTENSION, not commercial app by Threni · · Score: 2, Insightful

    > Man, really does apple.com or google.com has some very advanced background mind programming graphic so some people becomes rather like cult members?

    No, but they have people releasing code for their platform who view the $5 charge in the same way they view their ISP/electricity/book costs - as part of doing business.

  14. rhinestone bullet by epine · · Score: 4, Insightful

    If you have time, read all about it. "Get users credit card number" validation scheme is over. Completely over.

    You're from the school of silver bullets. If it won't work to a high degree, it's completely worthless. You might note that Google is not without resources in identifying the difference between a valid CC number and one found floating down some pipe in the intertubes.

    If half of the malicious lamers are too stupid to notice this, then Google has improved the signal to noise ratio in policing their chrome extension developers by 3dB.

    It's a minor barrier to malfeasance. It discourages sock puppets. And it sends the message "we care" which is the main reason aggressively scrubbing graffiti off trains in NYC works so effectively.

    The downside? Fewer chrome extensions written by the next teenage African Einstein. And shirt-rending despair over failure to attain the requisite degree of silver-bullet superhero mojo. Yet another superhero impostor. It's a tough life.

    1. Re:rhinestone bullet by TheRaven64 · · Score: 1

      You're from the school of silver bullets. If it won't work to a high degree, it's completely worthless

      In many cases, it can actually make things worse. It provides an evolutionary pressure forcing the scammers to adapt and become harder to detect, without actually eliminating any of them. See also: antibiotic resistant bacteria.

      --
      I am TheRaven on Soylent News
    2. Re:rhinestone bullet by mlts · · Score: 4, Interesting

      It raises the bar though, and makes for offenses that can be charged if the person doing credit card fraud is caught.

      A physical example. If a bike is leaning against a wall, that is just a mere theft. If it has a crappy lock, it is theft and property destruction. If the bike has a good lock and is locked to a parking meter in such a way that it can't be lifted off, then some thief cuts off the parking meter head, the thief is now facing larceny charges, as well as destruction of state/federal property. Similar with keeping things behind a display case. Smashing glass to grab something usually gets a lot more charges than grabbing something off a rack and bolting for the door.

      I agree though -- nothing is 100%, but this makes fraudsters have to do more work, and potentially face more jail time if caught.

    3. Re:rhinestone bullet by Anonymous Coward · · Score: 0

      Antibiotics are useless, or make things worse, because bacteria can adapt? dumbest argument ever.

    4. Re:rhinestone bullet by mysidia · · Score: 1

      Sorry.. no.. I saw the Neistat Brothers' video "Bike Thief"

      People still bikes in broad daylight en masse, nobody cares.

    5. Re:rhinestone bullet by mysidia · · Score: 1

      It is considered to make things worse to use antibiotics except where medically essential. Use of antibiotics promotes growth of bacteria resistant to the antibiotics.

      The resistant strains can then share genes with more harmful bacteria.

      The result is the antibiotic is less effective, or might not even work when it's really needed due to a live-threatening infection, which is antibiotic-resistant due to the frivolous use of the antibiotic.

      The "harm" is not that the antibiotic hurts you; the harm is that the use of the antibiotic makes the antibiotic less effective in the future when you (or other people) will live or die based on the question of whether or not the antibiotic will work.

      \

    6. Re:rhinestone bullet by Anonymous Coward · · Score: 0

      It raises the bar though, and makes for offenses that can be charged if the person doing credit card fraud is caught.

      Another common example is mailing expensive items. If you wanted to ship something thats relatively small but very expensive, ship it via United States Postal Service certified mail (as opposed to a private company). That way, if someone does jack it... Not only are they committing the crime against you... they're committing crimes against the government.

  15. open-source security clearances by Anonymous Coward · · Score: 0

    If someone introduced security clearance system for open-source developers we could spare them the 5 bucks. Who says everyone who writes software has a credit card anyway?

  16. Re:ah the ipod thing by Richard_at_work · · Score: 1

    When Paypal verified my bank account, they actually deposited two sums that totalled more than a British Pound, and never wanted it back. And yes, this was intentional!

  17. Business? by Ilgaz · · Score: 0, Troll

    Likely 99% of extensions, especially open source ones aren't business, they are favor to greater community.

    1. Re:Business? by auLucifer · · Score: 0

      Parent modded troll? He's bang on about extensions being a favour to the community. I'm yet to come across an extension that I've had to pay for so I've always viewed them as people developing to meet a need of their own and then releasing it to the world because maybe someone else could use it. Now yes, $5 isn't much in a developed nation but I'd imagine those that are malicious it won't be much cost to them, if any. If malicious code is installed in an extension to grab cc numbers then I wouldn't think it'd be long before the extension developer can create another account that one of his users will pay for. I'm just not convinced why they're doing this.

      --
      If I was witty I'd put something funny here but, as it stands, I am not and have just wasted seconds of your life
  18. What are zombie armies for? by Ilgaz · · Score: 0, Troll

    Really, why do they invest millions of dollars to make zombie armies? To spam? It is so over.

    In fact, they can even SWIFT the money, via stolen bank account. SWIFT/Bank is way more secure. (here comes $10 idea for Google)

  19. Re:Shows the attitude and some people may not have by betterunixthanunix · · Score: 1
    --
    Palm trees and 8
  20. Contract Law by stox · · Score: 1

    I suspect the reason for this is that Google wants to have an enforceable contract with developers. This was the quick and easy way to do it.

    --
    "To those who are overly cautious, everything is impossible. "
    1. Re:Contract Law by causality · · Score: 1

      I suspect the reason for this is that Google wants to have an enforceable contract with developers. This was the quick and easy way to do it.

      I am not a lawyer so this is a genuine question. Does money need to change hands in order to meet the "consideration" requirement of a contract?

      If no money changes hands and the contract consists of "you write extensions" and "we provide visibility for them", is it then invalid and unenforcable?

      --
      It is a miracle that curiosity survives formal education. - Einstein
    2. Re:Contract Law by mysidia · · Score: 1

      The $5 is in the wrong direction for that to be the case. Google already receives consideration from the developer in the form of an app submitted to their gallery for use by Google's customers.

      On the other hand, the developer doesn't receive compensation from Google for developing and submitting an app.

    3. Re:Contract Law by micheas · · Score: 1

      I suspect the reason for this is that Google wants to have an enforceable contract with developers. This was the quick and easy way to do it.

      I am not a lawyer so this is a genuine question. Does money need to change hands in order to meet the "consideration" requirement of a contract?

      If no money changes hands and the contract consists of "you write extensions" and "we provide visibility for them", is it then invalid and unenforcable?

      IINAL, but to answer your question no the elements of a valid contract under English common law (the legal system in the England and most of it's former colonies, including the USA) are:

      • Meeting of the Minds
      • Offer and Acceptance
      • Exchange of value - Both sides have to get something out of it.
      • Performance or Delivery
      • Good Faith (more important in some locations than other, very important in California)
      • Not Illegal

      A decent intro at expert law.

  21. Google is still killing Usenet by Anonymous Coward · · Score: 0

    Google is not without resources, sure, that's why Google originating spam is so prevalent on Usenet. A lot of groups are close to unreadable unless you kill file everything coming from Googles steaming pile of shit.

  22. Re:ah the ipod thing by larry+bagina · · Score: 1

    google adsense does the same thing. Ameritrade takes the deposits back afterwards.

    --
    Do you even lift?

    These aren't the 'roids you're looking for.

  23. Re:Shows the attitude and some people may not have by 42forty-two42 · · Score: 1

    That's not really relevant - nobody's paying for any software. The developer is paying a fee for hosting - and a very small fee, at that.

  24. I like it a lot by Anonymous Coward · · Score: 0

    Now more legit apps will outshine the many bogus ones. That's worth $5

  25. Did Google suddenly stop caring about PR? by bjartur · · Score: 0, Troll

    It's like Google just stopped marketing itself as the good, open giant. Have the hired all the best hackers already?

    1. Re:Did Google suddenly stop caring about PR? by mysidia · · Score: 1

      No.... Google realized they are in competition against Apple and Microsoft, and need to align their business practices a little more with them to successfully compete, I guess.

      For example, they need to start treating APIs as more precious, make sure to create lots of internal API Frameworks, use them in their own extensions, and flog any third-party who dare touch internal Frameworks.

      $5 today, but i'm surely they are just testing the waters.... in a year or so it might be $99 much like what Apple mobile devs have to fork over.

  26. Pay filter works well for user-generated content by Squeeself · · Score: 2, Insightful

    All it takes is $1 dollar (or in this case, 5), and 90% of your "annoying" userbase goes away, where annoying is spammers, cheaters, jokesters, etc. Anyone seriously wanting to cause trouble still will, but bored kids out for a thrill won't bother. In this case, it likely has the benefit of washing out any DOA projects that will just clog up searches. Anyone serious about creating project won't really blink at the cost, since it's so small, even if they don't plan to make money themselves. If you want quantity over quality, leave a user-generated content service free. If you want quality over quantity, charge a nominal fee. Works very well I've found.

  27. Re:FUCK YOU MAN !! by Abstrackt · · Score: 1

    Were the HELL am I gonna get five fucking hundered dollars man? Are they out of there fucking minds? FUCK YOU GOOGLE ASSWIPEES!

    Uh, it's only five dollars. Unless you plan on registering 100 accounts anyway.

    --
    They say a little knowledge is a dangerous thing, but it's not one half so bad as a lot of ignorance. - Terry Pratchett
  28. Re:ah the ipod thing by Anonymous Coward · · Score: 0

    You gave them direct debit to your bank account - not a good move

    One Pound is a small price compared to the amount of money they can take from you - WITHOUT RECOURSE

  29. Re:Shows the attitude and some people may not have by SanityInAnarchy · · Score: 1

    It shows what you can expect from their so-called free and open source browser.

    What's "so-called" about a browser which is actually free, and actually open source?

    In fact, everytime they do it, they prove GNU/FSF "nitpicking" about the FOSS and plain "open source".

    The FSF wouldn't have a problem with this, as far as I can tell -- Chromium still is, and always was, Free as in Freedom. Paying Google $5 to list/host your extension hardly counts as making it proprietary -- if you like, you can still release source, and still allow anyone else to either pay the $5 or host it themselves.

    I don't want to make anyone feel guilty or cheap but I personally know some open source developers who can't even afford a $30 external disk and development stops until they get some kind of donation.

    Where in my post did I say anything about this being "cheap"? I don't care if it's $5, $50, or $5000 -- it's just a listing. If there's a really good extension which can't afford or doesn't want this service, they can always host it elsewhere. It's not as though that's entirely unprecedented -- PuTTY pretty much refuses to get a real domain, and they haven't suffered because of it.

    I also have never once called GNU or the FSF "nitpicking" -- I understand why they do what they do, and while I don't agree that all software should be Free, I have no problem with their definition of Free. It seems you do, however -- remember, it's got nothing to do with price.

    So, just who did you think you were responding to?

    --
    Don't thank God, thank a doctor!
  30. Re:Pay filter works well for user-generated conten by mysidia · · Score: 1

    As a site operator, isn't that just another way of getting 33 attorneys general after you?

    They already went after paid expediting of abuse complaints.

    If the AGs find a pay-to-post-a-comment site, with some offensive comments.. who knows, they might deem it as equivalent to "Pay not to have your post removed" or "Pay to get your ocmments through the abuse filters"

  31. Mods, this is ridiculous! by TheVelvetFlamebait · · Score: 0

    The parent is, without a shadow of a doubt, not a troll. I disagree with his apparent viewpoint as much as anyone here, but this censorship, thinly disguised as moderation abuse, is truly pathetic. Please mod the parent +1 underrated.

    --
    You know, there is a difference between trolling and pointing out the flaws in your reasoning. Just saying.
  32. Vertical Tabs by devent · · Score: 1

    Since I don't have vertical tabs in the Chrome browser it's completely worthless anyway. With all the monitors are now widescreen format and with my usual 5 to 20 to 40 tabs open there is no way I switch from Firefox to the Chrome browser.

    --
    http://www.mueller-public.de - My site http://www.anr-institute.com/ - Advanced Natural Research Institute
    1. Re:Vertical Tabs by theGreater · · Score: 1

      Prototype vertical tabs are enabled on Windows -- not sure about OSX or Linux. I'm on the dev schedule release, and I can just r-click and select "use side tabs". But as I said, prototype: no indentation, no tree collapse, and they open above instead of below your current tab.

  33. Create better safeguards? by nurb432 · · Score: 1

    By charging *5* bucks to join the club? You have to be kidding.

    --
    ---- Booth was a patriot ----
  34. Re:ah the ipod thing by kdemetter · · Score: 1

    Because otherwise they will have no developers left.

    If it's not about money , they should indeed reimburse it.

    This basically means you have to pay in order to be allowed to work on something Google would otherwise have to pay developers for.

  35. Re:ah the ipod thing by Richard_at_work · · Score: 1

    On the contrary, in the EU Paypal is regulated as a bank and falls under the jurisdiction of the Financial Services Authority in the UK.

  36. I really don't get this move. by trooperer · · Score: 1

    I see it as a bad thing:

    1) Not all developers have credit cards. My country is a perfect example. Since online payment is (sadly) still a relatively new term for our local banks, you need to go through a lot of hoops to get an "internet-capable" debit card (some require security deposits even though it is a debit card, others require additional paperwork, etc). By default you just get a Visa Electron card which doesn't work online.

    2) There are some young developers who just want to play around and might produce some very creative things, but will be repelled by the fact that they need to ask their parents for CC. They'll just go ahead and make some cool stuff for Firefox instead.

    3) Why $5 and not just $1 or .5? I bet that there are some third world countries where paying $5 just to be able to submit your non-commercial web browser extension is a lot. If they wanted this as an authenticity tool, any (lower) value would work as well.

    1. Re:I really don't get this move. by im_thatoneguy · · Score: 1

      Let's be honest.

      1) We don't need that many developers. We need good developers.
      2) It's really not that hard to get a CC so any serious developer will be able to still join.

      Yes we might lose that shinning new star from Zimbabwe who was going to create an amazing new ad blocker--but in all likelihood we'll get an identical one out of someone from Canada anyway.

  37. If there's one thing I've learned in business... by Evro · · Score: 1

    ... anything free will be abused. If, within a company, department A does work at department B's behest, with no notion of "cost" associated with it, then department B will abuse department A, and just naturally dump more and more work onto them, because there's no reason not to. Even a simple "credit" system (i.e. each task costs 5 or 10 credits, and you get 200 credits per month) can help with this.

    This is why I always thought micropayments for SMTP traffic would be a wonderful solution for spam. "For each message you want to send to my SMTP server, you must pay $0.02." For most businesses, the ratio of "messages sent":"messages received" is around 1:1, so it would amount to a net zero. But If it's free it will be abused.

    Same with this. Apple charges $99 to be able to submit an app to the iTunes App store, I'm sure this is one reason why.

    --
    rooooar