InformAction Forums

Have there been lots of known cases of malicious add-ons in the past? Giorgio wrote that a pre-WebExtensions add-on could easily send your disk contents to a remote server https://hackademix.net/2017/12/11/noscript-and-the-downloads-permission/ . Would the add-on community even be likely to discover...

So in conclusion the only way to be sure that by using an add-on you're running only free open software is to check: its license that all files in its XPI are source files and not binary files every last line of its source code, because in one line it can fetch proprietary unknown code and execute i...

What about platforms other than Windows? Running exe files wouldn't work and I've never heard of add-ons limited to an operating system. Is it enough to check the list of files contained in an XPI file to get an indication that proprietary code may be included? Or is the only sure way to read all th...

That makes it really tricky to know if by using an add-on you're running closed source code, doesn't it? You can't even tell by looking at the add-on's license! How can a layman tell if an add-on makes use of closed source code? Is it enough to just look at the file extensions inside the XPI? If tha...

@GµårÐïåñ: Your post has been edited and in it there was talk of me making statements without due dilligence. But thank you for answering me. EDIT: testing if edit notification is appended to post You say an add-on may rely on proprietary code or libraries, but where could they be located in the Moz...

I know you don't make proprietary add-ons here and did not suggest otherwise. I asked, because from the first thread it was apparent that a number of people don't fully understand how the add-on system works. I also wasn't trying to make any statements and I'm not sure where you see them, everything...

As is explained here https://forums.informaction.com/viewtopic.php?p=9212 the XPI format for Firefox add-ons contains in a ZIP archive the source code of the add-on. One would therefore expect that all add-ons distributed with XPI files (as on https://addons.mozilla.org/en-US/firefox/ ) would be ope...