Users shouldn't have to search and then be able to understand the code found for such a feature. When a remote capability such as this exists it is Mozilla's responsibility to document how the feature works and the exact capabilities it gives them. Instead of doing so they have produced a wiki entry which appears to falsely describe the capabilities of this remote feature by stating it is used to change default preference values.

Hacker News

I think people here can be expected to read some code if they are interested in how something works.

Please read and follow the site guidelines when commenting here.

https://news.ycombinator.com/newsguidelines.html

All code is available – as a tar.xzipped archive of Firefox source code containing over 150k files and measuring over 1GB in size when unpacked.

grep -iR normandy

I expect code related to normandy to be ~1k LOC in size and probably written in JS. I haven't checked though, because I don't really care today.

And you shouldn't have to care. No one should. The very fact that this exists and that we are expected to trust it is very disappointing.

Open source software can't have a backdoor because the code is available to review.

Got it.