3 ms·
If you are a likely target for a government entity with subpoena power you have much bigger problems than your Firefox Accounts password. The problematical scen
by yborg 8y ago
If you are a likely target for a government entity with subpoena power you have much bigger problems than your Firefox Accounts password. The problematical scenario is that Mozilla is remote compromised by some bug or poor opsec and criminal entities will serve compromised JS. Since this has literally happened to basically every kind of organization out there, it is virtually certain to happen to Mozilla.
- drdaeman 8y agoThe problem is that Mozilla is aware about the issue for years, yet is not doing anything about it, even though the auth protocol is stable and documented. Okay, I get it that they may not want to rewrite already working parts of the browser - but even in this new Lockbox project they're using a WebView to log in to FxA. <fud>Maybe they're already breached by highest-profile actors like NSA?</fud>