Page 1 of 1

Mozilla & Security, Heh.

Posted: Thu Aug 16, 2018 7:56 pm
by therube
Mozilla & Security, Heh.
Mozilla & Webextensions, Heh.
Mozilla, Heh.

https://www.reddit.com/r/firefox/commen ... r/e465wqw/
https://www.reddit.com/r/firefox/commen ... ends_your/

Before (from my cache): https://s25.postimg.cc/gq0vfzjwv/Make_y ... extens.png

After: https://blog.mozilla.org/firefox/make-y ... xtensions/

Mozilla-endorsed security plug-in accused of tracking users
"Web Security says there's nothing nefarious to its URL collection"

---
Posted Sun Aug 12, 2018 6:35 am
So not only has AMO been gutted, they are so wanting to have anything there, that is what they accept, anything, including malware.
So not only has AMO spurned all the legitimate extension developers, they are so wanting to have anyone create anything, that is what they accept, everyone, including big.spy.on.you.com.

Take "Allen", an "education".
Here he is, a dozen or so extensions. His "websites", each using the same limited one page template, & that's it.

Why?

Given these times, given what is now "allowed", given what can be "gotten", is "Allen" Allen, or is he only a stooge for big.spy.on.you.com?

Maybe that is not the case, maybe he is simply a guy who in order to "education" has come up with these extensions for his own use, & thought he'd share them with the world. :-).


Isn't it wonderful that you cannot have any sort of trust in the majority of the extensions that one might install these days.
Isn't it wonderful that even your browser maker does dubious things for your benefit.
http://forums.mozillazine.org/viewtopic ... #p14806594


PS: No mention of NoScript. Conspicuously absent from this "reporter" (cough) when promoting their browser & "security".

Re: Mozilla & Security, Heh.

Posted: Thu Aug 16, 2018 8:22 pm
by therube
Oh, & look at this one, https://www.browser-safety.org/, which says it works in Mozilla too.
But Mozilla says, We're sorry, but we can't find what you're looking for..

Wonder if that is on their blocklist?

Blocked Add-ons
Wonder if that is part of "Aug 16, 2018: Web Security and others".
And of course, Mozilla, in its openness is, shall we say, rather vague.
Odd, isn't it. Block list reads "Web Security" (and others) & yet the very thing posted above is... drum roll... "Web Security", which is still available on AMO - if you dare.

(How much do you want to bet that that "Web Security" is the very same as "Browser Safety".)


Oh looky here, Web Security now as in now, now, says, This add-on has been disabled by an administrator.
(Got to give Mozilla for promptness - once the crap hits the fan.)

Anyhow, this is what "Web Security" looked like (moments before being pulled):

https://s25.postimg.cc/lfqt4xy67/Web_Se ... sion-1.png
https://s25.postimg.cc/m59lhb6fj/Web_Se ... sion-2.png

221 t-h-o-u-s-a-n-d users.
70 reviews. (But the reviews page only shows 20? You figure that one out.)

Re: Mozilla & Security, Heh.

Posted: Thu Aug 16, 2018 11:18 pm
by barbaz
Did you intend to link to addons.thunderbird.net instead of AMO?

Re: Mozilla & Security, Heh.

Posted: Fri Aug 17, 2018 2:12 am
by therube
I just followed the download link (https://addons.mozilla.org/addon/browser-safety/) from the "browser-safety.org" website & Mozilla, with me using SeaMonkey, "redirected" me to "TB".

Imagine that a FF user would get, https://addons.mozilla.org/en-US/firefo ... er-safety/.


(I bet this is yet another winner, https://addons.mozilla.org/en-US/firefo ... febrowser/.)

Re: Mozilla & Security, Heh.

Posted: Fri Aug 17, 2018 9:13 am
by barbaz
therube wrote:(I bet this is yet another winner, https://addons.mozilla.org/en-US/firefo ... febrowser/.)
Since it's MPL license, I took a quick look at the code. It's written in the legacy addon SDK, and AFAICT the connections to their server are only on user interaction. Doesn't seem malicious to me.

In my experience the legacy addons on AMO are generally way better reviewed than the WebExtensions on AMO. Before I install a new WebExtension, I always manually review it for myself (unless I have specific reason to trust a particular WebExtension or its author). This has saved me from installing malware on more than one occasion.

Re: Mozilla & Security, Heh.

Posted: Sat Aug 18, 2018 3:00 am
by barbaz