Malicious FireFox extension seeks to steal private data

User Comments: 4

1. July 26, 2006 6:01 PM
   DragonMaster said:
   Hopefully, NumberLinks doesn't look as something that is used by a lot of people. (Doesn't seem very useful)Just hoping Mozilla will do something about this -> Make extensions harder to install. They should include this before FFX2 is released.
   Reply
2. July 27, 2006 2:18 AM
   ThomasNews said:
   Making extensions harder to install for the End User isn't really the solution. The user needs to be more aware of what they are installing & not just blindly clicking Yes to prompts. The only thing I could imagine they would/could do is to valid an extension has been downloaded from Mozilla's secure extension sites/or some Extension whitelist.
   Reply
3. July 27, 2006 8:57 AM
   spike said:
   I suppose there could be some kind of encrypted signing system, where extentions have to be approved and signed by the Moz/FF community, and firefox will only accept extentions with that signing. It's not the best solution ideologically perhaps, but it works (for now, until the signing were to get cracked).
   Reply
4. July 27, 2006 10:27 PM
   DragonMaster said:
   The only thing is that an automated script can easily install a new extension just by copying files in the Mozilla folder w/o anyone noticing.
   Reply

Recently commented stories