News for hackers. Stuff that matters.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by roywiggins on Friday December 15, 2017 @01:28PM (#15933894)
> Now the code contains the ability to go fetch arbitrary code behind our backs and run it against our will.

How is that not what automatic updates are?

Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by geofft on Friday December 15, 2017 @01:31PM (#15933916)
Right. I trust my browser vendor to send me automatic updates without me reviewing because I believe that's net good for my security. I'd prefer to live in a world where I don't have to question that.
Re:Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser by roywiggins on Friday December 15, 2017 @01:40PM (#15933980)
There are definitely situations like corporate networks where automatic updates need to be quarantined and tested before rolling them out to all the machines, but since I don't pay a dedicated sysadmin to run tests on all my software on my personal computer before I receive updates, I'm content to trust my browser to update itself and hope it doesn't break anything.

It's disheartening when the update is a marketing tie-in.