Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I've recently red about firefox addons which makes the system vulnerable to security threats. And I also red that some antivirus software couldn't see it as a threat. Do you know of any workaround in order to avoid this. Or is there any application that can actually scan for a firefox addon to know if its acting maliciously or not.

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

Well, Firefox add-ons are contained in .XPI files, which are actually ZIP files, containing a bunch of Javascript, CSS, images, HTML, ... and other support files.

I see 2 ways malicious add-ons could be detected:

  1. antivirus compagnies modify their software so they scan inside the XPI files and use signatures to identify rogue add-ons
  2. Mozilla implements a "black-list" system for extensions, updated frequently and telling the users the extension has been disabled for security reasons.

Number 2 is actually in place, they used it to disable some extensions, including a Microsoft .Net extension that was later re-enabled.

I think it's now on Mozilla's side to prevent bad add-ons to cause issues to the users, and bad reputation to Firefox.

Heuristic antivirus scans would probably not work, as they would search for code that modify the browser features ... and this is exactly what add-ons are made for!

share|improve this answer
add comment

You're comparing two pairs of shoes here: Malicious is not vulnerable. Yes, it can happen that poorly written AddOns are vulnerable...but normally they do not survive that long in the wild (due to their OpenSource character) to really abuse them. Also it might be that there are malicious AddOns out there...but they're for sure not on addons.mozilla.org. Every AddOn you install from that site is tested, reviewed and safe.

Also, an AntiVirus software can only scan for known signatures of malicious code, but the Firefox-AddOns are mostly Javascript, which make it hard to track, because you can obfuscate the code in so many different ways that it is nearly impossible to really find what you're looking for. Such Software can not scan for vulnerabilities (otherwise, there would be none and security holes would never happen ;) ).

But I say it again and I have to shout it out loud, sorry: All AddOns from the official Mozilla-Site are safe!

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.