←back to thread

Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

(support.mozilla.org)
757 points shak77 | 2 comments | 15 Dec 17 13:47 UTC | HN request time: 0.001s | source
Show context
blauditore ◴[15 Dec 17 16:23 UTC] No.15932880[source]▶
Many people seem to be shocked because Mozilla installed an add-on automatically. In my opinion, it doesn't really matter since the code is coming from Mozilla - they're building the whole browser, so they could introduce functionality anywhere. If someone distrusts their add-ons, why trust their browser at all?

The main question is what behavior is being introduced. I haven't researched deeply, but apparently the add-on does nothing until the user opts-in on studies.

replies(16): >>15932942 #>>15932953 #>>15932998 #>>15932999 #>>15933001 #>>15933342 #>>15933599 #>>15933649 #>>15933656 #>>15933806 #>>15933901 #>>15934475 #>>15934693 #>>15935133 #>>15935703 #>>15941934 #
y0ghur7_xxx ◴[15 Dec 17 16:36 UTC] No.15932999[source]▶
> I haven't researched deeply, but apparently the add-on does nothing until the user opts-in on studies.

It adds some css to a list of words:

https://github.com/gregglind/addon-wr/blob/da464ac8f1c3b0894...

replies(3): >>15933117 #>>15933132 #>>15933502 #
ryukafalz ◴[15 Dec 17 16:52 UTC] No.15933117[source]▶
The extension only starts up if the config option "extensions.pug.lookingglass" is set to "true" though:

https://github.com/gregglind/addon-wr/blob/da464ac8f1c3b0894...

(It defaults to "false.")

replies(1): >>15934025 #
revelation ◴[15 Dec 17 18:45 UTC] No.15934025[source]▶
We already have a mechanism for disabling or enabling addons, it's not installing them in the first place. Why on earth would we put it to addons to self-police them.
replies(1): >>15934272 #
1. ryukafalz ◴[15 Dec 17 19:18 UTC] No.15934272[source]▶
It's behind a preference flag because it's installed automatically, and Mozilla's the only one who can do that. That's also why there's a lengthy approval process before such an addon can be pushed out:

https://mozilla.github.io/shield-studies-docs/study-process/

replies(1): >>15934303 #
2. revelation ◴[15 Dec 17 19:25 UTC] No.15934303[source]▶
You can just not install (and enable) addons automatically. Those addons should only be delivered to users who have 1) opted into the study process and 2) opted into the study in the first place.