Are there any known security downsides? about decentraleyes HOT 4 CLOSED

@RoxKilly : I can't answer for all questions but :

3. Scripts aren't be download, they are include in the extension and they are save as .js.dec. So any cache is need to work.

4. There is any mechanism to check versioning because you request CDN for a specific version.
   This extension just replace CDN files with local files.
   See resources directory of jquery to more understand

from decentraleyes.

@RoxKilly Thanks for sharing your questions and concerns.

1. The scripts are currently all contained within the add-on and there is an audit tool included, that lets anyone verify the integrity of the local files. These checks are also performed manually by a Mozilla volunteer before a new version goes live. About file integrity, only if you have malicious code on your machine that overwrites add-on data, but at that point you'd already be compromised.
2. Private Browsing mode does not affect the behavior or effectiveness of this add-on, since the files will be fetched from disk when needed, not from your browser's cache.
3. As mentioned by @matthieuy, they will indeed be saved on the user's hard drive. Future versions will most likely have support for custom resource bundles (that will also be saved to disk).
4. This was also correctly answered by @matthieuy, thanks!

from decentraleyes.

I'm closing this issue. For more details, please see this, previously referenced and related, issue on uBlock Origin's GitHub, kindly opened by @anewuser.

from decentraleyes.

@Synzvato Thanks for the info

from decentraleyes.