Other nomination

MITM attack to overwrite addons in Firefox

Christopher Soghoian

Soghoian's disclosure that Google Toolbar, Browser Sync, Yahoo, Facebook, AOL and other commercial Firefox extensions fetched updates over plain HTTP. Anyone controlling DNS or the network silently installs arbitrary extension code; some vendors had also disabled the update prompt. Extensions on addons.mozilla.org are unaffected.

Record

Researcher

Christopher Soghoian

In the archive

• Nominated for the 2007 Top 10 Web Hacking Techniques

Tags

• browser-extension
• https
• tls
• supply-chain
• dns
• mitigation
• case-study
• owasp-a02-2021
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Christopher Soghoian, first published at the original source. Preserved copies are kept so the citation survives its host.