On: The Most Dangerous Code in the Web Browser

[userbinator]

You're very correct about updates, but on the other hand I wonder what type of addon needs to be updated at such a high frequency?

Although making a way to easily see the changes made with each new version, something diff-like, would alleviate the problem.

[nallerooth → userbinator]

One part of the problem is that most of the extensions are updated silently in the background. Some extensions fire up a new tab with a page displaying new features and such, but this is not a requirement in any way.

[deian → nallerooth]

Even worse, they only update if they don't need any additional permissions. Thus incentivizing developers to ask for more permissions up front.

[DonHopkins → userbinator]

That's exactly what I wonder about Adobe Acrobat so often.