4 ms·
Plugins are not security holes! Sure they make it slightly more accessible to e.g. steal browser passwords, but you can always inject code into other processes
by atesti 14y ago
Plugins are not security holes! Sure they make it slightly more accessible to e.g. steal browser passwords, but you can always inject code into other processes to do such things.
- Armbrs 14y agoThe presence of other security holes doesn't invalidate the existence of this one.
- atesti 14y agoI really don't consider this a security hole! This does not increase privileges of the attacker: If the attacker can modify Firefox's profile directory it could also inject something into firefox or read the cookies directly.