Language Selection

English French German Italian Portuguese Spanish

Silent installs of add-ons still possible in Firefox

Filed under
Moz/FF

A security researcher has demonstrated how it is still possible to silently install extensions, or as Mozilla calls them add-ons, for the open source Firefox web browser. In a blog post, Julian Sobrier of ZScaler detailed the process, which makes use of the fact that Firefox uses an Sqlite3 database to maintain information about which add-ons are installed and, of those, which ones have been approved by the user.

This feature, introduced in Firefox 8, was designed to stop toolbars and other applications adding in their own add-ons without informing the user. Sobrier's technique shows though that the mechanism is relatively easy to overcome. Add-ons have privileged access to the browser and therefore a malicious add-on could do anything including stealing the user's history, modifying pages' contents or disabling security features in the browser.

rest here




More in Tux Machines

Absolute Linux Is a Lightweight Distro Based on Slackware 14.10

Absolute, an x86 Linux distribution based upon Slackware that concentrates on making sure that Internet, multimedia, document, and general home use works out of the box, is now at version 14.10 and is available for download. Read more

Future Linux Mint Releases to Have Other Colors Besides Green

Everybody knows that Linux Mint has a green theme and most people are able to recognize it from a glance because no one else is using it. It's become a sort of a trademark for it (not in the legal sense), but it looks like they are not happy with it or at least they are trying to appeal to other people who might not enjoy that green color. Read more

Deepin 2014.1, One of the Most Beautiful Distros in the World, Has Been Released – Gallery

Deepin developers have been hard at work on their new operating system and it looks like they managed to get a lot of fans. This system is one of the most interesting ones that have surfaced in the last couple of years. One of the reasons for its success is the implementation of a new desktop environment that is somewhat different from what other operating systems provide. Read more

Fedora 21 Will Try To Release Before Thanksgiving

Today was another FESCo meeting but fortunately no further Fedora 21 delay was announced today, but it could happen with the F21 alpha change deadline being today and the developers trying to get an approved build. Read more