User:Rdm/AMO Policy Notes

Definitions (should be deliberately said in a funny voice whilst making finger-quotes):

• "evil" - trying to make money in a way that some people don't like.
• "common" - deliberately fuzzy way of describing a product or service used by a large portion of AMO visitors.
• "spy" - word to describe any communication that is "evil".

Things that need to be removed from AMO, or more tightly regulated:

1. Extensions that use remote content in an unsafe way.
   • eg. BetterShopper (evals XMLHttpRequest reponse to get currency data)
2. Extensions that include binary components, and do not provide source that can be viewed/compiled by reviewers.
3. Extensions that require additional software to be installed outside of Firefox.
   • eg. BlueFrog (should be shipping the Firefox extension with their Windows app)
   • Perhaps make an exception for "common" software when the extension author is a third party.
4. Extensions that "spy" on surfing habits without a very good reason and user permission.
   • eg. EffectiveBrand.
5. Extensions that are useful only to specific communities.
   • FriendzForLife ForumNavigator
   • Again, "common" exception, eg. Slashdot extensions.

Reasons people upload these types of addons:

1. They're unaware of security issues.
2. They don't want to reveal secrets/break NDAs, see also 5.
3. AMO is great marketing for their main product, or they're unaware of extension registration methods.
4. They're "evil".
5. Dealing with the XPInstall whitelist is a lot of hassle, and AMO gives you an update URL for free.

Robert Marshall 12:17, 17 April 2006 (PDT)