We keep telling home users “just use common sense, update your stuff, and you’ll be fine.” But the last year has made that feel a little too simple.
On one hand, browsers are tightening extension rules (Manifest V3 in Chromium) in the name of security and performance. On the other hand, we’re still seeing large-scale campaigns living inside home routers, especially older end-of-life models, plus the usual wave of phishing and account takeovers. (arXiv)
So I’m curious what people here think...