3 ms·

Doesn't seem very high up their list of priorities, seeing as how their desktop extensions - including the "Recommended" ones - are allowed to break all the rul

by krono 4y ago

Doesn't seem very high up their list of priorities, seeing as how their desktop extensions - including the "Recommended" ones - are allowed to break all the rules. A surprising amount of them comes with unlisted and uncontrollable connections to snooping services like Google Analytics or Sentry, I've seen unexpected redirects / tab hijacks - mostly to advertise the developer's new other extension, even fetching and executing external scripts and other resources from various CDNs is not uncommon... essentially everything their extension policies disallow. All these violations are hardcoded into the extensions' source and rather easily scanned for automatically mind you, it almost takes more effort to not notice them. I've stopped reporting the ones I encountered, they were never taken down, never lost their recommended badge, and all the violations remained in every next version that I checked.

krono 4y ago
Here are some examples anyone can download to verify I'm not talking out of my arse: https://addons.mozilla.org/en-US/firefox/addon/giphy-for-firefox/ https://addons.mozilla.org/en-US/firefox/addon/giphy-for-fir... https://addons.mozilla.org/en-US/firefox/addon/tabliss/ https://addons.mozilla.org/en-US/firefox/addon/tabliss/ https://addons.mozilla.org/en-US/firefox/addon/youtube-subscription-groups/ https://addons.mozilla.org/en-US/firefox/addon/youtube-subsc... To get the source as its distributed to the browser you click "See all versions" in the "More information" panel on the left hand side of the extension page, then right click the "Add to Firefox" button and save to disk (don't left click the button if you're using FF or the extension will auto-install!), and then just unpack the XPI archive. Don't forget to send in those abuse reports, maybe that'll finally get Mozilla to look at them. Bonus link: https://extensionworkshop.com/documentation/publish/add-on-policies/ https://extensionworkshop.com/documentation/publish/add-on-p...

by krono 4y ago

krono 4y ago

Here are some examples anyone can download to verify I'm not talking out of my arse: https://addons.mozilla.org/en-US/firefox/addon/giphy-for-firefox/ https://addons.mozilla.org/en-US/firefox/addon/giphy-for-fir... https://addons.mozilla.org/en-US/firefox/addon/tabliss/ https://addons.mozilla.org/en-US/firefox/addon/tabliss/ https://addons.mozilla.org/en-US/firefox/addon/youtube-subscription-groups/ https://addons.mozilla.org/en-US/firefox/addon/youtube-subsc... To get the source as its distributed to the browser you click "See all versions" in the "More information" panel on the left hand side of the extension page, then right click the "Add to Firefox" button and save to disk (don't left click the button if you're using FF or the extension will auto-install!), and then just unpack the XPI archive. Don't forget to send in those abuse reports, maybe that'll finally get Mozilla to look at them. Bonus link: https://extensionworkshop.com/documentation/publish/add-on-policies/ https://extensionworkshop.com/documentation/publish/add-on-p...