5 ms·
If you decide to visit google, that's your problem. Visiting mozilla should be optional too. Otherwise it creates attack surface area that wasn't there before.
by rhn_mk1 4y ago
If you decide to visit google, that's your problem. Visiting mozilla should be optional too. Otherwise it creates attack surface area that wasn't there before.
- coldpie 4y agoOkay, so in conclusion, the attack vector from analytics that people spill dozens of comments on in every Mozilla thread is not unique to Firefox but rather shared with every website on the planet.
- rhn_mk1 4y agoYes. Except in most cases people aren't sent to $website unless they request it. That Mozilla does this is an opsec failure for anyone using it.
- coldpie 4y agoIf any network request will result in this vulnerability, then why do you have an Internet connection at all? This isn't a Mozilla problem.
- rhn_mk1 4y agoI can decide to connect only to trusted hosts. Having an automatic connection breaks that limitation. You ask for a real attack, but you don't seem to accept the example that you were given. I'm not sure what your point is.