Is diigo.com Safe?

At least one of their apps available via Chrome Web Store is considered pup or even malware. The app injects Javascript in the pages viewed and information is sent to a server. Here are a few user comments found on the Chrome Webstore review page: "Good app, but it injects JavaScript into webpages I browse. That comes pretty close to malware." "This app seems to inject spyware javascript that reports all pageviews to an external server, as well as manipulate page content." "I really love this app, but then I realized that you inject a spyware javascript... Please remove the spyware & change these permission request setting as I don't think you need these permission: - access data on all websites - access tabs & browsing activity" Also for reference check the following ongoing discussions: "Tracker-ish URL found in source code": ***** And at Google Groups, the same Diigo app has come under the attention of a user, discovering bot-like behaviour: https://groups.google.com/forum/#!msg/google-appengine/jEihs3D7Gig/eM9xuJLfnRgJ I strongly recommend avoiding this page in the time being or use extreme caution and make sure your PC and other devices are well-protected. *** (edit: I forgot to mention: this website is also being blocked by my "hosts"-file, but I have not yet checked which provider has added the site to their blocklist) (edit2: I ran the site ***** through a scanner. It found 84 clean files and 1 suspicious file (it contains obfuscating js, often used in malware coding. The results are public at: http://quttera.com/detailed_report/www.diigo.com)

Poor Privacy Before submitting a job application, I decided to Google myself in case there was anything new I wasn't aware of. Up came dozens of links to sites I had saved with Diigo. Many of them definitely NOT what I would want advertised. Nothing illegal or morally questionable. Simply embarrassing. Diigo seems to default to Public for all saved links, and requires a decision on each save to opt for private. I could find no switch to turn all my links to private. Failing that, I deleted my Diigo account. But not before at least one link-farm had a copy out there. I'm not impressed. I will stick to Evernote instead.

WARNING: They have strong security and privacy issues. ** Privacy: Beware that in default configuration (page notes actived), the firefox extension reports to Diigo servers every single URL you visit. If you do not believe me, install "Tamper Data" extension in Firefox to see outgoing HTTP requests. ** Security: They store your password in plaintext. (When I submitted a bug report to them, they sent a confirmation email containing my password in cleartext. This has been confirmed by several other users.) I **strongly*** advise to use a different service.