undefined | Better HN

0 pointsflomo12y ago0 comments

The security implications of requiring users to install Firefox add-ons are not any better than requiring them to install ActiveX plug-ins. (Other than pure vendor politics.) You still have the artificial requirement of some Win32 blob, which is the real issue.

0 comments

3 comments · 1 top-level

jessaustin12y ago· 2 in thread

It seems that being forced to use IE on Windows is more limiting than having to install an extension for whichever browser you choose on whichever OS you choose. If the security protocol were published or reverse-engineered, a clean re-implementation outside of Win32 could take place.

flomoOP12y ago

It's still an undesirable result even if it compiled a portable Linux .so just for your CPU architecture. The requirements are so flawed the system should be junked, not hacked around.

Also, I'm not sure why my post was dinged, but Firefox extensions/addons/plugins can call into native code and can do pretty much anything an ActiveX control can do. There is no "sandbox" as someone else implied.

atesti12y ago

But if the protocol is reverse engineered, one could USE the bank websites. There is no need for the reverse engineered solution to do any kind of anti keylogger or virus scanning stuff!

j / k navigate · click thread line to collapse