Hacker News Reader

> To be on the safe side, you can disable the relevant function in Kaspersky's software: Click the cogwheel icon in the bottom left corner of the main window, then click Additional/Network. Finally, uncheck the "Inject script into web traffic to interact with web pages" option under "Traffic processing".

So it wasn't exactly hidden, it was just a bad solution that could be disable deep-down some menu (but not hidden, as it was in the apropiate options).

View on HN

"Hidden" might refer to the fact that people won't know that the setting creates a (now) version-specific, persistent UUID that potentially compromises web safety.

Yes, and even the article doesn't say it was hidden. It has been just a feature that wasn't thoroughly thought when created, had a very bad side-effect, but it wasn't hidden.

The fact that it injected something wasn't hidden. The fact that it injected a unique ID wasn't documented, thus could be considered hidden.

Reply on news.ycombinator.com