Update 2023-09-10-Firefox-Part-3.md

_posts/2023-09-10-Firefox-Part-3.md

@@ -10,22 +10,26 @@ math: true
 # Thoughts on Recommended Extensions
 My findings about the Recommended Extensions in Firefox is that the program is good in theory, but has serious flaws in execution and policy. The program appears to have lax examination procedures and ineffective policies which provide a false sense of security for Firefox users. 
 
-## Policy Problems: 
+## Policy Problems
 
 ### No requirement to allow examination of code
 
 Extensions can use a custom licence or end user agreement which has consumer limiting terms that prevent the examination of source code. It's very hard to find malicious code if the user is prevented from searching for such code.  Furthermore, for Firefox to claim that recommended extensions have the “highest standards of security” is dubious, since exposing or even investigating malicious code can come with risks of financial and legal repercussions.
 
-For example, Enhancer for YouTube has a licence that states "nobody has the right to review the Source Code" and that "nobody has the right to reverse-engineer" while promising legal action should the terms be violated. If malicious code was found in an investigation, I wouldn't feel comfortable reporting it for fear of legal issues.
+![Image](https://raw.githubusercontent.com/ColoursofOSINT/ColoursofOSINT.github.io/master/assets/img/images/firefox/Enhance.png)
+
+For example, *Enhancer for YouTube* has a licence that states "nobody has the right to review the Source Code" and that "nobody has the right to reverse-engineer" while promising legal action should the terms be violated. If malicious code was found in an investigation, I wouldn't feel comfortable reporting it for fear of legal issues.
+
+![Image](https://raw.githubusercontent.com/ColoursofOSINT/ColoursofOSINT.github.io/master/assets/img/images/firefox/terms.png)
 
 This is very concerning considering the various complaints about ads:
 
-+ "This extension ... includ[es] advertisements." - hmm 
-+ "Adware in a Recommended extension is absolutely UNACCEPTABLE, especially since you can't adblock elements in a settings page. This is malware-like behavior." - Psythik 
-+ "When the add-on is automatically updated it presents a popup on every single youtube tab until they're refreshed. This popup does not go away, and cannot be closed easily." - Firefox user 15163168
-+ "Abuses user trust by inserting ads in the settings and opening the ad-on settings page *without user interaction*. Unacceptable. Recommended label needs to be removed."  - Firefox user 17092397
-+ "Instantly removing due to inclusion of pop up ads. How in the hell are you going to have an app that removes YT ads then hits you with its own popup ads?" - Scott347
-+ "Whenever you open Firefox, Enhancer for YouTube™ sets a youtube.com cookie." - Firefox user 16930958,
+1. "This extension ... includ[es] advertisements." - hmm 
+2. "Adware in a Recommended extension is absolutely UNACCEPTABLE, especially since you can't adblock elements in a settings page. This is malware-like behavior." - Psythik 
+3. "When the add-on is automatically updated it presents a popup on every single youtube tab until they're refreshed. This popup does not go away, and cannot be closed easily." - Firefox user 15163168
+4. "Abuses user trust by inserting ads in the settings and opening the ad-on settings page *without user interaction*. Unacceptable. Recommended label needs to be removed."  - Firefox user 17092397
+5. "Instantly removing due to inclusion of pop up ads. How in the hell are you going to have an app that removes YT ads then hits you with its own popup ads?" - Scott347
+6. "Whenever you open Firefox, Enhancer for YouTube™ sets a youtube.com cookie." - Firefox user 16930958
 
 The developers asseration that if there was "do not collect data of any sort, and they do not inject ads" and that if they did the extension would "be rejected" is worthless, as the review team misses the most basic of code injection and analytics.