Discussion

Installing every* Firefox extension

ryanisnan: Dang this is so good. Well done.

xnorswap: This article is wonderful crazy.The icing on the cake is the discovery of a potential performance bug in one or more of the about: pages, that's definitely worthy of following up.

lapcat: > It turns out there’s only 84 thousand Firefox extensions.On addons.mozilla.org, but you can distribute Firefox extensions without posting on addons.mozilla.org. I do.

gathered: I'm laughing so hard at the video, I imagine this is what browsing the web is like for the elderly that barely know how to use a computer. Can someone do this in Chrome?

Eddy_Viscosity2: Where is the video, I scanned through and only saw still images.

rented_mule: It's inline. Search the page for (and heed): epilepsy warning

layer8: > I did some research to find why this took so long. 13 years ago, extensions.json used to be extensions.sqlite. Nowadays, extensions.json is serialized and rewritten in full on every write debounced to 20 ms, which works fine for 15 extensions but not 84,194.Occasionally, databases are useful. ;)

proactivesvcs: "In terms of implementation, the most interesting one is “Іron Wаllеt” (the I, a, and e are Cyrillic). Three seconds after install, it fetches the phishing page’s URL from the first record of a NocoDB spreadsheet and opens it [...] The API key had write access, so I wiped the spreadsheet."

Waterluvian: This is probably a good example of the opposite. It would be a mistake to design for the fleetingly rare case. If you’re dealing with a handful of extensions, a json file that’s rewritten is fine.

methodist: The extension is actually still up: hxxps://addons[.]mozilla[.]org/en-US/firefox/addon/%D1%96ron-w%D0%B0ll%D0%B5t/