The likely end of DownThemAll
There is no piece of software in the world harder to secure than a browser. There's almost no other piece of software where compromises have higher stakes. Further, the verdict is probably in on whether browsers should use multi-process sandboxes, and how careful they need to be about privilege-escalated Javascript, which is an <i>enormous</i> loophole for runtime security measures like ASLR and DEP.<p>Firefox's multi-process model is apparently called Electrolysis. Electrolysis apparently breaks XUL extensions.<p>If that's the short term cost of getting Firefox to the same level of security that Chrome is at, it seems more than worth it.<p>If this were an encrypted messaging application like TextSecure making an extension-breaking announcement for security, we'd have no trouble understanding the stakes. What some people seem to have a hard time accepting is that their browser is their most important encrypted messaging application.