<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
On 10.02.20 10:25, <a class="moz-txt-link-abbreviated" href="mailto:opto@optosolar.com">opto@optosolar.com</a> wrote:
<blockquote type="cite"
cite="mid:20200210092511.5FA0E339017@mailout1b.colt1.inetserver.de">
<pre class="moz-quote-pre" wrap="">I can' really remember any post in the various forums reporting of any security breach of an addon.</pre>
</blockquote>
<p><br>
</p>
<p>Because we don't post this on forums.</p>
<p><br>
</p>
<blockquote type="cite"
cite="mid:20200210092511.5FA0E339017@mailout1b.colt1.inetserver.de">
<pre class="moz-quote-pre" wrap="">* Are there posts detailing addon security breaches?
* How many bad addons try to pass review per year?
* Has that had any user impact?
It might help discussions and evaluations to have more info.
I am not talking of addons breaking TB upon ESR upgrades that can be healed by deinstalling.
Which addons/how many have been shown on posts or review to be truely bad or insecure?</pre>
</blockquote>
<p><br>
</p>
<p>Bad addons (constantly updated):</p>
<ul>
<li><a class="moz-txt-link-freetext" href="https://support.mozilla.org/en-US/kb/add-ons-cause-issues-are-on-blocklist">https://support.mozilla.org/en-US/kb/add-ons-cause-issues-are-on-blocklist</a></li>
<li><a class="moz-txt-link-freetext" href="https://blocked.cdn.mozilla.net/">https://blocked.cdn.mozilla.net/</a></li>
</ul>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">Please note that for security, a
theoretical possibility is what matters, not whether an incident
happened in the past. Once somebody copied all your very private
photos and posted them on Internet, it is a little late to start
caring about security.<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<blockquote type="cite"
cite="mid:20200210092511.5FA0E339017@mailout1b.colt1.inetserver.de">
<pre class="moz-quote-pre" wrap="">I am reading that addons must be restricted in their access to core TB for security measures.</pre>
</blockquote>
<p><br>
</p>
<p>If Thunderbird doesn't keep up with Firefox, then the core of
Thunderbird becomes insecure. See:</p>
<ul>
<li><a class="moz-txt-link-freetext" href="https://www.mozilla.org/en-US/security/advisories/">https://www.mozilla.org/en-US/security/advisories/</a><br>
</li>
</ul>
<p><br>
</p>
<br>
</body>
</html>