janne lindqvist, a mobile security researcher at the rutgers university winlab, expressed concern about the discovery mechanism of a web-based platform, but a mozilla spokesperson stated that mozilla required developers to "package downloadable apps in a zip file that has been cryptographically signed by the store from which it originated, assuring that it has been reviewed." in addition, "apps coming back from search are given only limited access to device programming interfaces and applications, unless the user grants permission for further access."