Skip to content

Commit

Permalink
Update 2023-09-10-Firefox-Part-3.md
Browse files Browse the repository at this point in the history
  • Loading branch information
ColoursofOSINT committed Sep 11, 2023
1 parent 6d5466f commit 609a615
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions _posts/2023-09-10-Firefox-Part-3.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,7 @@ math: true
# Thoughts on Recommended Extensions
My findings about the Recommended Extensions in Firefox is that the program is good in theory, but has serious flaws in execution and policy. The program appears to have lax examination procedures and ineffective policies which provide a false sense of security for Firefox users.

## Policy Problems

- No requirement to allow examination of code
## Policy Problems: No requirement to allow examination of code
Extensions can use a custom licence or end user agreement which has consumer limiting terms that prevent the examination of source code. It's very hard to find malicious code if the user is prevented from searching for such code. Furthermore, for Firefox to claim that recommended extensions have the “highest standards of security” is dubious, since exposing or even investigating malicious code can come with risks of financial and legal repercussions.
For example, Enhancer for YouTube has a licence that states "nobody has the right to review the Source Code" and that "nobody has the right to reverse-engineer" while promising legal action should the terms be violated. If malicious code was found in an investigation, I wouldn't feel comfortable reporting it for fear of legal issues.
This is very concerning considering the various complaints about ads:
Expand Down

0 comments on commit 609a615

Please sign in to comment.