Hi. I'm using mozilla and mozilla firefox. I often install extensions
though only through the usual websites (mozilla.org, mozdev,
texturizer).

Today though I tried to install an extension from
http://jgillick.nettripper.com/ and as such found myself wondering if
extensions comprmise the security of mozilla or firefox.

I use firefox to access sites such as paypal and my bank. As such I
would like to ask the following questions...

1 - can someone make an extension that would allow it (while
performing its advertised function) to send my username/password
either from those stored in mozilla/firefox or as i enter them?
2 - can such an application make it to the trusted sites? (mozilla,
mozdev, texturizer)? or is there a review process before such
extension is allowed to be distributed?

thanks
_______________________________________________
Mozilla-security mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-security

Reply via email to