SecurityFocus

Re: [FD] Mozilla extensions: a security nightmare Aug 05 2015 03:33PM
Stefan Kanthak (stefan kanthak nexgo de) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare Aug 05 2015 06:14PM
Ansgar Wiechers (bugtraq planetcobalt net) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare Aug 05 2015 07:27PM
Stefan Kanthak (stefan kanthak nexgo de) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare Aug 06 2015 10:55AM
Reindl Harald (h reindl thelounge net) (2 replies)

Re: [FD] Mozilla extensions: a security nightmare Aug 06 2015 05:03PM
Christoph Gruber (list guru at) (2 replies)

Reindl Harald <h.reindl (at) thelounge (dot) net [email concealed]> wrote:
>
> that's all fine but
>
> * nothing new, independent of lightning

ACK

> * how do you imagine a restricted user install a extension otherwise

Real sandboxing, if not possible, give the users the possibility to activate admin-installed extension, and not the possibility to install every shit which comes with a "I am free" or "I am sexy" tag.

> * and no - he must not do that is not a acceptable solution

Yes it is.

> security and usability are always a tradeoff

Not always, and if, sometimes security has to win.

> hence the topic *is* nonsense

No, it is not

Just my 4 cent

--
Christoph Gruber

[ reply ]

Re: [FD] Mozilla extensions: a security nightmare Aug 06 2015 06:05PM
Andrew Deck (andrew hastings deck gmail com)

Re: [FD] Mozilla extensions: a security nightmare Aug 06 2015 05:28PM
Reindl Harald (h reindl thelounge net)

Re: [FD] Mozilla extensions: a security nightmare Aug 06 2015 04:08PM
Bruce A. Peters (bpeters se-kure com) (1 replies)

Re: [FD] Mozilla extensions: a security nightmare Aug 15 2015 04:41PM
Stefan Kanthak (stefan kanthak nexgo de)