3 ms·
He’ll be fine as long as the extension doesn’t steal data. The moment that happens, his job is on the line.
by yunohn 5y ago
He’ll be fine as long as the extension doesn’t steal data. The moment that happens, his job is on the line.
- cxr 5y agoWhat happened to vetting sources? Beonex is Ben Bucksch, a Mozilla true believer who's been around since before Firefox even existed. The chances that it will suddenly turn into malware is about as likely a distro's coreutils package maintainer going rogue—and far less likely than the revolving door at Mozilla Corp leading to the Firefox product team deciding to do something untoward themselves.
- yunohn 5y agoVetting sources is only basic due diligence. Auditing source code, infrastructure, and data storage is crucial regardless of how “prolific” the author is.
- cxr 5y ago> Vetting sources is only basic due diligence. Right, which is my point.
- yunohn 5y agoYou’re saying this individual is more trustworthy than Mozilla, because of employee churn? There’s a bus factor of 1 vs N in this example. I trust indie devs for lots of software, tools, and apps; but absolutely not an extension that reads my privileged communications.