![\"is_your_firefox_extension_making_you_susceptible_to_a_hack\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2016\/04\/is_your_firefox_extension_making_you_susceptible_to_a_hack.jpg\")
Browser extensions are in the news lately, and not just for Firefox. Recently, hackers have corrupted several Google Chrome extensions, and are using them to display unwanted ads to unsuspecting users. For Firefox though, matters are a fair bit worse. It\u2019s not just ads that Firefox users have to worry about, it\u2019s the possibility of losing total control of their browser to a hacker, and that, of course, opens the door to losing control of your computer itself.<\/p>\n
Chrome and Firefox handle extensions differently, and in the case of Firefox, extensions are allowed to share code. This opens up a window of potential exploitation. If the hackers can get one corrupted extension past Firefox\u2019s manual code integrity checkers, and that extension gets downloaded by a user, it can begin passing code to other extensions with elevated privileges, and ultimately wind up with full control over a user\u2019s browser. At that point, all bets are off. The now-controlled browser could download a malicious file in the background without the user\u2019s knowledge, or the hacker could keep track of every keystroke logged by the user. In either case, that amounts to bad news.<\/p>\n
It should be noted, however, that this hack only came to light after an extensive two years of testing. This is not the sort of attack that a garden variety hacker could, or would even think to pull off, but there are clearly hackers out there who could do such a thing, and given the nature of the attack, there\u2019s virtually no defense against it.<\/p>\n
There\u2019s good news on that front, however. Firefox has already responded, reporting that that later this year, they\u2019ll be releasing a new set of browser extension APIs that introduce multi-process architecture to Firefox, and by extension, to all the extensions users might install. This will, by definition, keep them from using the same code, which will solve the problem. Provided users update, of course, making it more important than ever to keep current with updates.<\/p>\n","protected":false},"excerpt":{"rendered":"
Browser extensions are in the news lately, and not just for Firefox. Recently, hackers have corrupted several Google Chrome extensions, and are using them to display unwanted ads to unsuspecting users. For Firefox though, matters are a fair bit worse. It\u2019s not just ads that Firefox users have to worry about, it\u2019s the possibility of […]<\/p>\n","protected":false},"author":5,"featured_media":24543,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[34,30],"yoast_head":"\n