The likely end of DownThemAll
There is no piece of software in the world harder to secure than a browser. There's almost no other piece of software where compromises have higher stakes. Further, the verdict is probably in on whether browsers should use multi-process sandboxes, and how careful they need to be about privilege-escalated Javascript, which is an enormous loophole for runtime security measures like ASLR and DEP.Firefox's multi-process model is apparently called Electrolysis. Electrolysis apparently breaks XUL extensions.If that's the short term cost of getting Firefox to the same level of security that Chrome is at, it seems more than worth it.If this were an encrypted messaging application like TextSecure making an extension-breaking announcement for security, we'd have no trouble understanding the stakes. What some people seem to have a hard time accepting is that their browser is their most important encrypted messaging application.