Hacker News Reader

I have cleaned my share of malware infections and I can't think of one were the attack vector seemed to be FF.

Now we seem to be nerfing the beast because someone might do stupid things.

I worked in university IT for a year, focused on student's personal machines. A good majority of malware we experienced installed extensions and reconfigured browser preferences.

I understand why Mozilla and Google have done similar things to restrict extension installation, but can't help but think there has to be a better way for users who know what they're doing.

You may not have seen one yourself, but browser vendors have data on this: there is a lot of malware out there that infects browsers.

Browsers are putting a lot of effort into preventing this, they wouldn't do it if they didn't have clear information showing the problem was serious.

I don't doubt that malware adds browser extensions, but is that the initial infection vector or just installed later after the malware is already in place?

Reply on news.ycombinator.com