Re:Exploit vendor drops Tor Browser zero-day on Twitter
by pcwalton on Tuesday September 11, 2018 @12:18PM
(#17961094)
All that has to happen to fix this vulnerability is to remove support for legacy addons—which is what Firefox Quantum already did.
The old addon system made it far too easy to make catastrophic mistakes like this. Web Extensions, which are an API that was actually designed with security in mind, constitute a huge security improvement.
The old addon system made it far too easy to make catastrophic mistakes like this. Web Extensions, which are an API that was actually designed with security in mind, constitute a huge security improvement.