Mozilla prohibits connections to the internet, which aren't necessary for the advertised functionality of an extension. So, these are rather "Chrome extensions" we're talking about...
this post was submitted on 02 Sep 2023
50 points (100.0% liked)
Free and Open Source Software
17931 readers
83 users here now
If it's free and open source and it's also software, it can be discussed here. Subcommunity of Technology.
This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
founded 2 years ago
MODERATORS
I wonder how easy it would be to make an extension and fake it's popularity? Make make it intentionally broken or something, so users immediately uninstall it too.
Sounds like an easy $10k, assuming the scammers would actually pay.
Don't extensions get reviewed by the various stores? I'd imagine an automated check can catch malicious integrations like that.
Maybe not right away, but once they catch wind of one shady extension they could just search the store for any other ones.