3 ms·

If an extension has been installed on my machine it is by definition trusted. Firefox is not my antivirus solution and it should not try to be. Keep your lane.

• Groxx 3y ago
  Adware and spyware have a long history of silently installing browser extensions to collect more info. Is it really trusted? Though this kind of thing will generally be removed by the extension block list, not merely blocked from working on some domains.
  • floomk 3y ago
    As far as the browser should be concerned, yes it is trusted. It's up to another layer of security to help the user not install extensions (or any other software) that they do not want on their machine. This security is a farce anyway. Firefox is installed in the user profile so any sufficiently advanced malware can just patch the firefox binary and embed itself in there or disable this nonsense. The extension shenanigans is just done to take away user control, with the excuse being to protect users from malware.
    • deleted 3y ago
      [deleted]
  • ilyt 3y ago
    Okay ? If FF knows signature of known bad extension why would it block it only on some sites?! That makes zero sense from security perspective. It would be like asking antivirus to only let virus access D:\ drive...
    • Groxx 3y ago
      Yeah, the site-specific blocking seems... mostly dubious, possibly decent as a "this is a banking website - extensions are disabled by default, but you can click to enable them" thing. Right now it looks much more dubious than anything though. But even in the very best case, it's yet another custom "premium support" feature either way, like the Public Suffix List. They should push for standards instead, these kinds of things are always leaky and sometimes dangerous. Anyway. I just meant that extensions are not trustworthy just because they're installed. Malicious vectors exist, and protecting people from themselves / them understandably not being an up-to-date expert in all things tech by the millions-to-billions is largely a good thing.