4 ms·
> the entire community vets Pardon my ignorance, but not every extension is open source? Recently been a few stories of popular extension maintainers offered m
by A2017U1 8y ago
> the entire community vets
Pardon my ignorance, but not every extension is open source? Recently been a few stories of popular extension maintainers offered money to either include coffee or hand over all control to shady people.
Personally I wouldn't count thousands getting auto-updated malware installed in their browser before the world notices as vetting.
- anoncake 8y ago> Pardon my ignorance, but not every extension isnt open source right? No, but this one is.
- A2017U1 8y agoI realize that and even gave it a try long ago, the comment was meant in general. Besides ublock origin and noscript I avoid extensions like the plague. Autoupdates mean that any malicious actor could infect many before it gets pulled.
- sametmax 8y agoNot but this one is. A lot of popular extensions are. And even the ones that are not are quite easy to read: - extensions are a just a zip file full of static assets - they are rarely minified or obfuscaded - they use a manifest and a set of standard API - they are distributed through one plateform So it's still way easier to keep them in check than ads, even if we didn't have to take the number of them in consideration.