funsec mailing list archives

Re: FlashGot Firefox plugin, now spyware


From: Gadi Evron <ge () linuxbox org>
Date: Wed, 17 Feb 2010 05:39:33 +0200

On 2/17/10 12:00 AM, Daniel Veditz wrote:
AMO has a "No surprises" policy. This was an unwelcome surprise.
http://blog.mozilla.com/addons/2009/05/01/no-surprises/
https://addons.mozilla.org/en-US/developers/docs/policies/reviews#section-defaults

There's no ban on ad-supported extensions, but unless the main announced
purpose is to serve ads then it had better be clear it does so. And if it
needs to share data with a 3rd party server (whether for ads or for the
normal functioning of the add-on) then it has to have a privacy policy and
  explain what it's doing. And making such changes on an upgrade is supposed
to require user opt-in.

I find this "no surprises" concept fascinating, and a nice solution to 
the problem. Thanks for sharing it!

        Gadi.



-- 
Gadi Evron,
ge () linuxbox org.

Blog: http://gevron.livejournal.com/
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: