Mozilla Add-ons Security

[the.scarecrow]

As a relative Newbie I started exploring the Mozilla features, quickly finding the addons feature I gave it a try by installing "colorful tabs".

That's great, I thought but then started to worry that installing something like that could compromise my systems security. It seems that this addon is accessible from the Mozilla website, a limited number of addons are also available to install from Ubuntu.

Is there a risk installing these addons? is any risk greater if the addon is not available from Ubuntu but is available via Mozilla?

I assume that all these addons from either site are well known and have been checked for computer viruses, but I don't know for sure that they are safe to use.

Security is very important to me as I have to do a lot of on-line bank transactions.

Thanks for any advice
the scarecrow

[Kinstonian]

Generally the more code, the more vulnerabilities. However, simple FF add-ons (I assume includes colorful tabs) usually aren't going to add as many vulnerabilities as an add-on like a Flash player or PDF reader. I'm sure the track record of colorful tabs located here (https://addons.mozilla.org/en-US/firefox/addons/versions/1368) is a lot better than a Flash player you may be using.

Whether you want to avoid the risk by not using the add-on, or want to mitigate the risk of it-- for example by making sure you keep your software updated, is up to you. A security add-on such as NoScript fixes far more problems than it introduces and I think should be considered part of everyone's defense against malicious web sites.

[cariboo907]

Seeing as you are a new user, I would suggest having a look here:

http://ubuntuforums.org/showthread.php?t=510812

and

http://ubuntuforums.org/showthread.php?t=919472

When adding addons to Firefox, if you use the addons available on Mozilla's site you should be OK. I have seen addons that haven't been checked by the Mozilla team. It will usually state on the info screen that is up to you whether you want to install it or not.

Remember that you are the person that is responsible for security. Only you running as root can install malware.

Jim