31–40 of 86 posts
Earlier quoted context omitted.
My favorite part was the metal pipe sound effect. Wish the author investigated which extension does that.
Maybe it was this? https://addons.mozilla.org/en-US/firefox/addon/random-metal-...
Chrome Web Store has something similar: https://chromewebstore.google.com/sitemap
Sad that no real pages can load successfully, but I thoroughly enjoyed the writing. > We turned on crash reporting on the way. I haven't burst out laughing like this in a while! You'll probably make for some horror stories to a poor Mozilla team.
EDIT: if they still have the profile they can actually find the crash ID for their crash report: https://support.mozilla.org/en-US/kb/troubleshoot-firefox-cr...
I quickly wrote up how: https://www.arnevogel.com/firefox-permissions/
"In terms of implementation, the most interesting one is “Іron Wаllеt” (the I, a, and e are Cyrillic). Three seconds after install, it fetches the phishing page’s URL from the first record of a NocoDB spreadsheet and opens it [...] The API key had write access, so I wiped the spreadsheet."
Earlier quoted context omitted.
If you turn loose a completely untrained person to click yes/accept/download/OK/I agree on every type of user interface popup, particularly a person who has no ability to distinguish between a user interface question presented by the operating system itself and something inside of a browser window, that's what you'll get...
I have a vivid memory of once looking over someone's shoulder in the IE days and being horrified to see toolbars taking up about 80% of the available screen real estate, leaving only maybe 150-200 pixels of vertical space for actual web browsing. I have no idea how they got anything done, and my guess was they never actually used any of the installed toolbars and just thought that was normal.
Earlier quoted context omitted.
This is probably a good example of the opposite. It would be a mistake to design for the fleetingly rare case. If you’re dealing with a handful of extensions, a json file that’s rewritten is fine.
But the software already has multiple database systems built in. There's not exactly overhead to use what plumbing is already there, instead of writing to disk.
I had to recover somebody's bookmarks for them recently after it decided to destroy the main copy.
"In terms of implementation, the most interesting one is “Іron Wаllеt” (the I, a, and e are Cyrillic). Three seconds after install, it fetches the phishing page’s URL from the first record of a NocoDB spreadsheet and opens it [...] The API key had write access, so I wiped the spreadsheet."
Did you just admit to a CFAA violation?
This is really surprising. Either because Firefox is not that popular ir mozilla has an automatic filter?