News for hackers. Stuff that matters.

A comment on Mozilla Firefox Add-On Signing Update. Parent comment

Re:Mozilla Firefox Add-On Signing Update by cpeterso on Saturday January 23, 2016 @01:48PM (#10959450)
90% of web users are on Windows, where there is no sudo. Malicious add-ons make money by injecting ads, overriding default search engine settings, capturing login credentials or even local files, or installing zombie spam relays. sudo is unnecessary for these attacks. How does one make money with sudo?

And as for locking down sudo, OS X is now "rootless" (System Integrity Protection) by default, preventing even sudo access from modifying some system settings.

[ Parent | on HN ]
Re:Mozilla Firefox Add-On Signing Update by jMyles on Saturday January 23, 2016 @04:32PM (#10960197)
> 90% of web users are on Windows, where there is no sudo.

This argument is becoming increasingly specious.

Firefox is the default browser on Ubuntu, where there is sudo. So do you acknowledge that it is consistent to keep this preference in at least the linux version of FF?

[ Parent | on HN ]