Archetypal “malware,” the kind that’s illegal to distribute, doesn’t have to worry about any of this stuff. It can just patch the browser. The problem is “legi

Archetypal “malware,” the kind that’s illegal to distribute, doesn’t have to worry about any of this stuff. It can just patch the browser. The problem is “legitimate” businesses that engage in scummy-but-not-illegal behavior. Stuff like the Ask toolbar being shipped with Java, and five years later my friends wind up with dozens of toolbars and they don’t even know where they came from. Those sorts of companies will not patch Firefox.exe, because that would require violating Mozilla’s registered trademark.