18 ms·
How do we know that this extension can be trusted ?
by wolfgangK 2y ago
How do we know that this extension can be trusted ?
- jhdias 2y agoWe read the source code.
- Filligree 2y agoThen it auto-updates.
- NinoScript 2y agoThen we blindly trust that someone else is still reading the new version’s code and will raise the alarm if something bad happens.
- rpdillon 2y agoI highly recommend turning off auto updates on browser extensions.
- dotancohen 2y agoI suggest looking into the Obfusicated C contest before relying on your own reading of code to verify lack of malicious intent.
- blacksmith_tb 2y agoThere's no source provided in the repo? It seems to just be a discussion of how to download the xpi from somewhere else.
- mindslight 2y agoYou run it in a VM that you only use for casual web browsing, so the scope of possible damage is limited.
- berkai 2y agoWe simply can't, I guess. Not after the original repo is long gone due to DMCA. Therefore, better to mention to do your own due diligence.