[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FD] Mozilla extensions: a security nightmare



Reindl Harald <h.reindl@xxxxxxxxxxxxx> wrote:
> 
> that's all fine but
> 
> * nothing new, independent of lightning

ACK

> * how do you imagine a restricted user install a extension otherwise

Real sandboxing, if not possible, give the users the possibility to activate admin-installed extension, and not the possibility to install every shit which comes with a "I am free" or "I am sexy" tag.

> * and no - he must not do that is not a acceptable solution

Yes it is.

> security and usability are always a tradeoff

Not always, and if, sometimes security has to win.

> hence the topic *is* nonsense

No, it is not

Just my 4 cent

-- 
Christoph Gruber