Firefox extensions are a great way to customize and improve your browsing experience, but these add-ons can also be a security risk. During this episode of TR Dojo, I explain how these handy Firefox additions can be both a benefit and a hazard.

Note: There is a poll embedded within this post, please visit the site to participate in this post's poll.

For those who prefer text to video, you can click the Transcript link that appears below the video player window or read Michael Kassner’s article, “Some Firefox extensions may be exploited to install malware.” In the article, Kassner interviews security researchers Roberto Suggi Liverani and Nick Freeman about the pair’s examination of Firefox extension security. I also encourage you to download and read Suggi Liverani and Freeman’s Defcon 17 presentation, “Abusing Firefox Extensions” (pdf) or listen to an audio recording of the event (m4b).

For more information on Firefox security and the add-on submission process, check out the following Mozilla resources:

• The Add-on Review Process and You (Mozilla Add-ons Blog)
• Security best practices in extensions (Mozilla Developer Center)
• Sandbox Review System (Mozilla Add-ons for Firefox)
• Add-on Policies (Mozilla Add-on Developer Hub)
• Review Process (Mozilla Add-on Developer Hub)
• Add-on Submission (Mozilla Add-on Developer Hub)
• Code Validation Tool (Mozilla Add-on Developer Hub)
• Validation Help (Mozilla Add-ons for Firefox)

For the latest TR Dojo lessons, sign up for one or more of the following:

• Follow Bill Detwiler on Twitter
• Subscribe to the TR Dojo newsletter (delivered Tuesdays and Fridays)
• Subscribe to the TR Dojo RSS feed
• Sign up for customizable TR Dojo e-mail alerts
• Access TR Dojo from your mobile device