Mozilla Firefox's extension store being flooded with malware • Hacker News Board

Re: Mozilla Firefox's extension store being flooded with malware

#11

Post by eddythompson80 » Mon, Aug 04, 2025, 3:52 PM UTC

radiofreeeuropa wrote: post #9

blitzar wrote: post #6

Partially off topic, but youtube ads for me are currently 70% out and out scams - deepfaked tv personalities telling you about some government scheme where every person gets £20,000 cash. Even the closed ecosystems are infected.

It's been like that since before "AI" (before ChatGPT's big marketing break-out) Google's revenue is largely from promoting scams and tricking old people into clicking ads that look like normal search results. They're a total scumbag company, it's a sign of how broken consumer protection is that they've gotten away with it for years with no meaningful legal consequences. [EDIT] Downvotes are warranted, I missed the l…

It’s getting so much worse though. This post is from 2020[1], and it’s much worse now as google has removed the bold “Ads” word into a “sponsored” heading that is different across desktop and mobile and for the most part appears to be part of the list header rather than attached to any particular ad.

Bing is 10 times worse. They intermix search results with ads, and the only indication is a small light-gray/white “WEB” or “AD” tag that has a css blur and pixilation effect. It’s so subtle it’s insane.

[1] https://www.theverge.com/tldr/2020/1/23/21078343/google-ad-d...

Re: Mozilla Firefox's extension store being flooded with malware

#12

Post by norenh » Mon, Aug 04, 2025, 3:53 PM UTC

Workaccount2 wrote: post #3

Firefox is down bad right now. I have used it steadily for 20 something years now, and the cracks are really apparent now. It's also likely that Google will be forced to stop giving Mozilla money for Firefox, leaving little hope for continued development. This might actually be the end of FF.

Could you name another browser with enough backing to be able to keep up?

Besides Google Chrome (controlled and backed by the surveillance overlords) and Safari (Kept alive by Apple cultists) I see very few free alternatives that can stand on their own. The other options are various niche browsers that leech on one of these three that might have a few changes here and there but lacks the real capability to stand on their own legs.

What I mean with capacity to stand on their own legs is that the group behind it should;

  * Be able to be a part in development of web-standards

  * Be able to keep up with ever changing web-standards

  * Be able to suggest and develop new web-standards if needed

  * Be able to maintain a modern web-browser

This needs a relevant user-base, active developers and standard-committee members as well as infrastructure and cash-flow to maintain it for expected stuff like add-ons and various other bits needed (on-line checks, certificate handling, etc) that is expected from a modern browser.

I am worried about Mozilla but I see no reason to declare that the end is nigh just yet.

Firefox is still very much relevant to me, although I use mainly linux-distros and do not normally use webpages as applications (I browse with javascript disabled, unless there are specific needs). I would love to see some more options out there, but alternatives to Firefox are currently not on the horizon for me.

Re: Mozilla Firefox's extension store being flooded with malware

#13

Post by jeltz » Mon, Aug 04, 2025, 3:55 PM UTC

charcircuit wrote: post #5

Workaccount2 wrote: post #3

Firefox is down bad right now. I have used it steadily for 20 something years now, and the cracks are really apparent now. It's also likely that Google will be forced to stop giving Mozilla money for Firefox, leaving little hope for continued development. This might actually be the end of FF.

Firefox could enter a revenue share parternship with Bing, or another search engine. Or they could follow in Brave's (and Google's and Microsoft's) footsteps in creating a search engine in order to own such a lucrative advertising surface.

Firefox does not have any revenue issues at all. If the Mozilla exec team did not have to make themselves rich and sponsor various personal pet projects they could easily afford to develop Firefox basically forever.

Re: Mozilla Firefox's extension store being flooded with malware

#14

Post by [deleted] » Mon, Aug 04, 2025, 4:00 PM UTC

vntok wrote: post #7

Workaccount2 wrote: post #3

Firefox is down bad right now. I have used it steadily for 20 something years now, and the cracks are really apparent now. It's also likely that Google will be forced to stop giving Mozilla money for Firefox, leaving little hope for continued development. This might actually be the end of FF.

Somewhat counterintuitively, Google being forced to stop giving Mozilla money is arguably the best single thing that can happen to the project right now.

[deleted]

Re: Mozilla Firefox's extension store being flooded with malware

#15

Post by eddythompson80 » Mon, Aug 04, 2025, 4:06 PM UTC

blitzar wrote: post #10

eddythompson80 wrote: post #8

Earlier quoted context omitted.

What do you mean by a closed ecosystem in this context? Because I wouldn’t considered YT ads a closed ecosystem compared to MAO. They are both a publishing platforms, one is just paid. The problem with spam or malware is that there is monetary return for your investment in it. Paying to distribute spam or malware is reasonable strategy if there is a decent ROI. Your local businesses flooding your mailbox with spam th…

Its googles advertising network - there are and should be guard rails in place. They should audit the content. They should do KYC. They should do many many things. "it's better to beg for forgiveness than ask for permission (and keep the money either way)" is probably up on the wall instead of "do no evil" https://support.google.com/adspolicy

That would make it a moderated ecosystem, not a closed one.

AFAIK, Section 230 protection extends to online advertisement as these companies claim the ads are user generated content. There were many law suits against Google and Meta about being responsible for the content and ads their algorithms push and how it radicalized people or harmed people. I recall Google and Meta won all those cases.

Plus, in the 1960s there was a famous Supreme Court case against NYT for publishing a pro-civil rights ads that contained wrong claims against some like cop or politician in the south. They argues that NYT was libel for the malicious attack. The Supreme Court ruled in NYT favor because even if the ad buyers were malicious, they need to prove that NYT was also intentionally malicious in their intent

Re: Mozilla Firefox's extension store being flooded with malware

#16

Post by jackmottatx » Mon, Aug 04, 2025, 4:07 PM UTC

blitzar wrote: post #6

Partially off topic, but youtube ads for me are currently 70% out and out scams - deepfaked tv personalities telling you about some government scheme where every person gets £20,000 cash. Even the closed ecosystems are infected.

[dead]

Re: Mozilla Firefox's extension store being flooded with malware

#17

Post by ChrisNorstrom » Mon, Aug 04, 2025, 4:12 PM UTC

blitzar wrote: post #6

Partially off topic, but youtube ads for me are currently 70% out and out scams - deepfaked tv personalities telling you about some government scheme where every person gets £20,000 cash. Even the closed ecosystems are infected.

YES. I get constant Deepfake Oprah and Joe Rogan ads on YouTube. They know about it. They just don't care. Google can easily demonetize channels, block videos, anytime you talk about something controversial (Covid-19 vaccines, Jan 6, election denial, etc...)

A few years back when people were talking about Q-Anon / Pedophile celebrities thousands of YouTube channels were taken down simultaneously of anyone, ANYONE, who was talking about it. "Mouthy Buddha" on YouTube had just 2 videos on the subject and had his channel taken down and was never allowed back on. They all migrated over to BitChute at the time. The YouTube press release claimed about 10,000 videos and their channels removed.

So Google does have ways of scanning content and banning the scam ads, they just don't want to.

Re: Mozilla Firefox's extension store being flooded with malware

#18

Post by lapcat » Mon, Aug 04, 2025, 4:18 PM UTC

This headline has been editorialized, contrary to HN guidelines, and it's also inaccurate. The actual headline of the story is "Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons".

The story is about a phishing campaign directed at extension developers, not about the extension "store" (which is not really a store and doesn't sell anything), being "flooded" with malware.

Re: Mozilla Firefox's extension store being flooded with malware

#19

Post by cosmic_cheese » Mon, Aug 04, 2025, 4:22 PM UTC

jeltz wrote: post #13

charcircuit wrote: post #5

Earlier quoted context omitted.

Firefox could enter a revenue share parternship with Bing, or another search engine. Or they could follow in Brave's (and Google's and Microsoft's) footsteps in creating a search engine in order to own such a lucrative advertising surface.

Firefox does not have any revenue issues at all. If the Mozilla exec team did not have to make themselves rich and sponsor various personal pet projects they could easily afford to develop Firefox basically forever.

Yes, this. If cash is such a problem, exec comp packages have no business being as large as they are. That should be the first thing to get cuts.

Personally speaking I’d be willing to donate if I knew my cash were going towards Firefox and Gecko. I already donate to other FOSS projects where it’s more obvious where the money is going.

Re: Mozilla Firefox's extension store being flooded with malware

#20

Post by firefax » Mon, Aug 04, 2025, 4:22 PM UTC

lapcat wrote: post #18

This headline has been editorialized, contrary to HN guidelines, and it's also inaccurate. The actual headline of the story is "Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons". The story is about a phishing campaign directed at extension developers, not about the extension "store" (which is not really a store and doesn't sell anything), being "flooded" with malware.

>This headline has been editorialized, contrary to HN guidelines, and it's also inaccurate.

Thanks for pointing this out -- don't hesitate to flag things like this.