Mozilla stops distribution of WOT addon

Re:Mozilla stops distribution of WOT addon by codedokode on Friday November 04, 2016 @09:14AM (#12872260)

There is nothing that can be done. Any moderation can be easily bypassed (for example, obfuscated code, code loaded from external servers etc.). You just should not install software that you don't trust.

For example I don't use any browser extensions because I don't have time to inspect their code after every update.

I wonder why both Google and Mozilla don't write this at the front page of their extension stores?

[ Parent | on HN ]

Re:Mozilla stops distribution of WOT addon by cheiVia0 on Friday November 04, 2016 @02:32PM (#12874796)

Mozilla actually manually reviews the extensions and updates to the extensions, and would reject obfuscated code. See for example:

https://blog.mozilla.org/addons/2016/08/19/a-simpler-add-on-...

https://blog.mozilla.org/addons/2010/02/15/the-add-on-review...

[ Parent | on HN ]

Re:Mozilla stops distribution of WOT addon by paulryanrogers on Friday November 04, 2016 @02:17PM (#12874688)

Serious question: do you audit code changes in browser updates?

EDIT: I realize there are (probably) fewer authors involved there.

[ Parent | on HN ]

Re:Mozilla stops distribution of WOT addon by codedokode on Friday November 04, 2016 @05:42PM (#12876404)

Browsers are made by reputable organizations like Mozilla Foundation or (not so reputable) Google. And extensions are usually written by some anonymous person from Internet (or sold to anonymous person after gaining popularity).

[ Parent | on HN ]