On Sat, Nov 28, 2009 at 11:51 PM, Kálmán „KAMI” Szalai <kami...@gmail.com> wrote: > Adam Barth írta: >> It's important to separate two concerns: >> >> 1) Malicious extensions >> 2) Honest extensions that have vulnerabilities (benign-but-buggy) >> >> I agree that the malicious extension problem is somewhat intractable >> because of the above concerns. However, than news article is >> complaining about vulnerabilities in honest extensions. > > And How can we avoid the Malicious extensions problems'.
I'm not sure. That's a hard problem, but we can still make progress on the benign-but-buggy case. Adam _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security
