3 ms·
Why couldn't they store a hash of the plugins of a given profile on the server, and check that at startup? It wouldn't be much different than their already exis
by mishmash 16y ago
Why couldn't they store a hash of the plugins of a given profile on the server, and check that at startup? It wouldn't be much different than their already existing malware checks.
- jasonlotito 16y agoDon't they already do this though? Pop up a window that tells you if new addons have been installed?
- aboodman 16y agoThis would work reasonably well. It is still circumventable by "attackers" (eg by replacing or patching firefox.exe, modifying /etc/hosts, etc), but the bar is higher. On the other hand, it also requires Mozilla running and maintaining a service, which is a pretty resource intensive solution for such a minor feature. Also some users do not like their browsers phoning home for any reason whatsoever, so they would want a way to disable the feature. Of course, once there's a disable switch, attackers can flip it as easily as users.