News for hackers. Stuff that matters.

A comment on Button Stealer. Parent comment

Re:Button Stealer by vstollen on Tuesday July 23, 2024 @05:35AM (#41044268)
Are (updates to) extensions from the Chrome and Firefox store usually vetted before publication?

I‘ve heard that Firefox will only run signed extensions. Would you trust this process?

[ Parent | on HN ]
Re:Button Stealer by zinekeller on Tuesday July 23, 2024 @07:01AM (#41044703)
> Are (updates to) extensions from the Chrome and Firefox store usually vetted before publication?

Mozilla does not manually review most extensions (only extensions which Mozilla recommended are manually reviewed: https://support.mozilla.org/en-US/kb/add-on-badges).

Chrome's policy is extensions are "reviewed periodically for compliance", but is unclear on how frequent is this periodic review (https://developer.chrome.com/docs/webstore/review-process).

[ Parent | on HN ]