Firefox addons - security?

freebo_2

Hi,
Does anyone on here know about developing firefox addons? Please see this thread, I'm not suggesting the addon is anything other than innocent, however could an Addon be developed for phishing?, and if so how would we know?

Thanks!

Mike

imho

Well McAfee site advisor doesnt like that web site. I wouldnt down load it.

fwor

I'm not an expert on the subject, but there are certainly reports of malware being written as Firefox add-ons or extensions, such as the one described here:

http://www.techweb.com/wire/security/191101268

However, given that yours is being published openly on a UK-based website (or at least appears to be!) you're probably safe enough.

I think you would be safest if running Firefox under Linux - because of the security architecture within that OS - and least safe if running FF with an "Admin privilege" account under Windows.

freebo_2

fwor wrote: »

I think you would be safest if running Firefox under Linux - because of the security architecture within that OS - and least safe if running FF with an "Admin privilege" account under Windows.

Thanks, I run it under OS X (unix based), I'm a Unix Sysadmin for a living, so I don't tend to use windows much.

It was really more of a general question, I don't suspect that the particular Addon is doing anything naughty.

sra

I think ones on the main extension site are looked at carefully.
I've seen a few get kicked off because the team decided they sent too much info back to the creator (Sending minor statistics back so I'm sure anything that sent serious details wouldn't be allowed).

I wouldn't install any extension unless it was from a site I trust - many review sites look carefully at software/extensions before recommending them.