Skip to content

Commit 2b82f3d

Browse files
Update 2023-09-10-Firefox-Part-3.md
1 parent 59be380 commit 2b82f3d

File tree

1 file changed

+9
-6
lines changed

1 file changed

+9
-6
lines changed

_posts/2023-09-10-Firefox-Part-3.md

+9-6
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,11 @@ math: true
1010
# Thoughts on Recommended Extensions
1111
My findings about the Recommended Extensions in Firefox is that the program is good in theory, but has serious flaws in execution and policy. The program appears to have lax examination procedures and ineffective policies which provide a false sense of security for Firefox users.
1212

13-
## Policy Problems: No requirement to allow examination of code
13+
## Policy Problems:
14+
15+
### No requirement to allow examination of code
1416

15-
- Extensions can use a custom licence or end user agreement which has consumer limiting terms that prevent the examination of source code. It's very hard to find malicious code if the user is prevented from searching for such code. Furthermore, for Firefox to claim that recommended extensions have the “highest standards of security” is dubious, since exposing or even investigating malicious code can come with risks of financial and legal repercussions.
17+
Extensions can use a custom licence or end user agreement which has consumer limiting terms that prevent the examination of source code. It's very hard to find malicious code if the user is prevented from searching for such code. Furthermore, for Firefox to claim that recommended extensions have the “highest standards of security” is dubious, since exposing or even investigating malicious code can come with risks of financial and legal repercussions.
1618

1719
For example, Enhancer for YouTube has a licence that states "nobody has the right to review the Source Code" and that "nobody has the right to reverse-engineer" while promising legal action should the terms be violated. If malicious code was found in an investigation, I wouldn't feel comfortable reporting it for fear of legal issues.
1820

@@ -29,13 +31,14 @@ The developers asseration that if there was "do not collect data of any sort, an
2931

3032
Recommended extensions should be held to the highest standards. Users should be allowed to search for malware, adware and spyware without worrying about legal consequences.
3133

32-
- Overly Permissive Permissions
34+
### Overly Permissive Permissions
3335

3436

3537
## Extension Examination Failures
36-
- Search for common terms
37-
- Permission scope analysis
38-
-
38+
### Search for common terms
39+
### Permission scope analysis
40+
41+
3942
## Communication Failures
4043

4144
# Afterword

0 commit comments

Comments
 (0)