Submitted via IRC for SoyCow9228
Mozilla sneaked a browser plugin that promotes Mr. Robot into Firefox—and managed to piss off a bunch of its privacy-conscious users in the process.
The extension, called Looking Glass, is intended to promote an augmented reality game to "further your immersion into the Mr. Robot universe," according to Mozilla. It was automatically added to Firefox users' browsers this week with no explanation except the cryptic message, "MY REALITY IS JUST DIFFERENT THAN YOURS," prompting users to worry on Reddit that they'd been hit with spyware.
"I have no idea what it is or where it came from. I freaked out a bit and uninstalled it immediately," one user wrote on Reddit.
Without an explanation included with the extension, users were left digging around in the code for Looking Glass to find answers. Looking Glass was updated for some users today with a description that explains the connection to Mr. Robot and lets users know that the extension won't activate without explicit opt-in.
Mr. Robot is a TV series about hackers airing on USA Network.
Source: https://gizmodo.com/mozilla-slipped-a-mr-robot-promo-plugin-into-firefox-1821332254
(Score: 2) by sjames on Monday December 18 2017, @08:40PM
The data files remain a problem, though selinux and other MAC systems can help a lot there. There is an advantage to software not being able to modify itself, it's far from useless. End of the day, if software can modify itself (possibly as a result of a security flaw, it's game over. Part of your data will necessarily be accessible to some of the software you run. No security system can prevent that and leave you with a usable system
A file system that supports snapshotting can at least help you to recover if something goes wrong.