New Update Firefox Shopping Addons - are they safe to use?

[SpectacularTheDude]

I'm seeing some interesting addons for Firefox that help compare prices in Amazon stores throughout Europe and track prices through time.

My question is are these things safe to install in your browser or are best to be avoid?
In case they are safe can you recommend any in particular?

Thanks!

 

[Ink]

Best to stick with a modern browser that lists permission requests, because unlike Chrome and Edge, Firefox won't tell you. Stick to Trusted authors or well-reviewed Add-ons.

I use websites to find the best deals without compromising my browsing history to an extension/add-on. HotUKDeals, Groupon, VoucherCodes and MyVoucherCodes etc.

"Unfortunately, Firefox add-ons won’t tell you what permissions they need when you install them, so there’s really no way to tell what type of access they use. This is one more reason to be very careful with what you install, as malicious add-ons can turn your browser into the perfect vector attack for delivering ransomware, financial malware, malvertising or other types of cyber threats."​

Source: How to Master Your App Permissions So You Don’t Get Hacked – The Full Guide - Heimdal Security Blog

 

[ozone]

Avast has some addon, but...
I was browsing steam, looking for some games, and came across game Rust.
Avast saved me 15€, great
but it recommended me to buy wax against rust

so better use sites with deals

 

[SpectacularTheDude]

Best to stick with a modern browser that lists permission requests, because unlike Chrome and Edge, Firefox won't tell you. Stick to Trusted authors or well-reviewed Add-ons.

I use websites to find the best deals without compromising my browsing history to an extension/add-on. HotUKDeals, Groupon, VoucherCodes and MyVoucherCodes etc.

"Unfortunately, Firefox add-ons won’t tell you what permissions they need when you install them, so there’s really no way to tell what type of access they use. This is one more reason to be very careful with what you install, as malicious add-ons can turn your browser into the perfect vector attack for delivering ransomware, financial malware, malvertising or other types of cyber threats."​

Source: How to Master Your App Permissions So You Don’t Get Hacked – The Full Guide - Heimdal Security Blog

That info is a real eye opener. I never thought about that but seems logical that they would need permissions.
Great advice.

I use this page from the mozilla website to check plugin status, by the way. does anyone else use this?

 

[SHvFl]

I use camelcamelcamel for price alerts and price history. It's safe but you should follow @Spawn advice to use it on chrome or something similar so you can see permissions.

 

[SpectacularTheDude]

Actually I think I found a better solution.
I don't install any of that and either go to the websites they have or add their searches to my search bar.
Of course adding to my search bar requires an addon...

 

[ForgottenSeer 55474]

The only Extensions I use is:Https,Grammarly Premium,Ublock Origin,Google Translate and Lastpass.

 

[SpectacularTheDude]

The only Extensions I use is:Https,Grammarly Premium,Ublock Origin,Google Translate and Lastpass.

Google translate for Firefox? The one with a big red "T" as a symbol?

 

[Dirk41]

Best to stick with a modern browser that lists permission requests, because unlike Chrome and Edge, Firefox won't tell you. Stick to Trusted authors or well-reviewed Add-ons.

I use websites to find the best deals without compromising my browsing history to an extension/add-on. HotUKDeals, Groupon, VoucherCodes and MyVoucherCodes etc.

"Unfortunately, Firefox add-ons won’t tell you what permissions they need when you install them, so there’s really no way to tell what type of access they use. This is one more reason to be very careful with what you install, as malicious add-ons can turn your browser into the perfect vector attack for delivering ransomware, financial malware, malvertising or other types of cyber threats."​

Source: How to Master Your App Permissions So You Don’t Get Hacked – The Full Guide - Heimdal Security Blog

Wow thank you , I did not knoe about that .
But maybe SBIE protects me

 

[Ink]

But maybe SBIE protects me

I could be wrong, but..
I don't think SBIE can protect your browser session with a malicious add-on installed, because while it may be isolating any attacks directed at your PC, it's still stealing data from your Firefox browser and history.

@Umbra could shed some light.

 

[SHvFl]

I could be wrong, but..
I don't think SBIE can protect your browser session with a malicious add-on installed, because while it may be isolating any attacks directed at your PC, it's still stealing data from your Firefox browser and history.

@Umbra could shed some light.

Correct. If the addon can steal data and transmit them sandboxie will not do anything because you can't restrict internet access to the browser.

 

[SpectacularTheDude]

Well I uninstalled all extensions except security stuff.

 

[Ink]

Well I uninstalled all extensions except security stuff.

You can use add-ons, but make sure it's from Firefox Marketplace and if sceptical, background research. Also applies to 'Security' add-ons.

 

[Dirk41]

I could be wrong, but..
I don't think SBIE can protect your browser session with a malicious add-on installed, because while it may be isolating any attacks directed at your PC, it's still stealing data from your Firefox browser and history.

@Umbra could shed some light.

Yes you are absolutely right .
I meant if some malicious extension is installed , you can close SBIE delete the sandbox and open again the browser . ... Obviously you have to notice that something bad is installed