undefined | Better HN

0 pointsh1d7y ago0 comments

But who has reviewed the code of the version available when you install?

0 comments

https://github.com/containers-everywhere/contain-google

You can review it yourself. There is not a whole lot of code here.

I think Mozilla does a basic review. Not perfect but good enough. The extensions situation has gotten bad enough that I'd support Mozilla having an "approved extensions" section where you pay to have yours reviewed and approved.

Springtime7y ago

The fact that Stylish managed to remain—and be featured, even—on both the Mozilla and Chrome catalogs for close to two years as it tracked user's browsing history says to me that there must be certain level of trust for pre-reviewed addons.

rndgermandude7y ago

The mozilla add-ons site actually rejected the version with tracking (the post acquisition one) for some years due to the tracking and still featured the old version without tracking. Chrome's webstore version did have the tracking, tho.

Now in the era of WebExtensions (which are SOOO much more secure!!!) it seems they finally approved a version published by those bad actors. No idea tho if and what tracking is in there and if mozilla stuck to their guns and made them remove tracking or not.

1 more reply

j / k navigate · click thread line to collapse