So, I had to “fix” my fathers browser again this morning. I swear sometimes letting the elderly loose on the internet feels like letting them rawdog a crackhead sex party under an overpass full of used syringes. They’re guaranteed to catch something.
Anyway, he had half a dozen of scam extensions installed that all added “Yahoo by <scam>” (also, he uninstalled uBO ffs).
Why?
Has yahoo become so desperate and/or scammy that they rely on malicious extensions to drive traffic to their shitty search engine? Are they so insecure that any scammer can hijack them to inject their own ads?
How the fuck can my father catch such extensions despite me locking down pretty much everything (he’s on Bluefin) and not even knowing what an extension is?
Maybe experiment with making the extensions directory read-only so they can’t be uninstalled, but that might not prevent merely disabling them.
Your situation might actually be a use-case for Firefox Enterprise as and when that comes out. It’s likely to cost money though. Assuming they don’t make the feature set available for regular Firefox sysadmins for free anyway.