![Firefox logo](https://assets-prod.sumo.prod.webservices.mozgcp.net/media/uploads/products/2020-04-14-08-36-13-8dda6f.png)
Extensions Security Deficit
I am observing a trend where popular extensions, such as the "I don't care about cookies" extension, change ownership and become derelict and/or malware, as clearly pointed out in recent reviews for the extensions. However, it takes multiple clicks to get to this information in the reviews, and there is very little curation.
I understand it is likely highly infeasible to audit extensions for malware in any comprehensive way, however I definitely feel that there is room for enhancement of the present processes.
I think this extension search process should be more proactive in informing users of these events. For example, rather than just displaying a star rating next to the extension name, displaying chronological trends would be more information-dense. Like if recent reviews are trending negative. This could also reward and incentivise extensions which are properly supported, (and not malware), displaying that their reviews are maintaining / increasing positivity over time.
A supporting feature could be publicising changes of ownership of an extension prominently - "This extension has changed ownership N times, the most recent change was Y-date to X-owner. Reviews have trended Z since that time".
Is something like this being worked on already? If so I am interested in contributing to it.
Все ответы (1)
Also, I note that the community fork of the "I don't care about cookies" extension --
appears lower in search results and displays a security warning flag, compared to the original extension --
which presents no security warning yet is according to the comments both derelict and malware.
Seems like undesirable behaviour of these flags. Inverse, really, of their purpose.