News for hackers. Stuff that matters.
Re:Stopping FTP support in Firefox 90 by antisol on Wednesday July 21, 2021 @02:28AM (#27902961)
How many in-the-wild attacks did you see using XUL from extensions that were in the curated addons ecosystem, i.e not downloaded and manually installed via extra steps a novice is unlikely to go through?
Re:Stopping FTP support in Firefox 90 by fomine3 on Wednesday July 21, 2021 @02:55AM (#27903120)
XUL allows too many modification for browser. It increases attack surface, and it makes hard Firefox developer to modify Firefox's internals to improve things.
Re:Stopping FTP support in Firefox 90 by antisol on Wednesday July 21, 2021 @04:42AM (#27903869)
you didn't answer my question.

I asked how many times you saw this exploited in the wild, not "how would an attack theoretically work".