have Google, Firefox etc VERIFY identity of the corporation and or individual who submits the extension. that way the can be traced back and held legally liable for their behavior, or at least have a starting point for an investigation.
How is this a bitcoin topic? Move it to "Off Topic" please - control to the left under the post.
The community deserves to know about html malleability risks that could steal their coins.
Over a 100 BTC plus countless altcoins have been stolen.
In 1 transaction, 60 BTC stolen today here. The attack bypasses 2FA. You won't know your coins are gone until AFTER you hit withdrawal and you verify on the blockchain. Such a terrible feeling.
http://www.reddit.com/r/Bitcoin/comments/23zmoz/lost_life_savings_60_btc_while_transferring_to/