Ubiquity Foreshadows Future Browser Security Challenges

**Executive Summary:** The report evaluates security risks in Mozilla's Ubiquity extension, showing that easily authored and remotely updateable commands can interact with the browser and exfiltrate user data; a proof-of-concept 'evil-search' command demonstrates how search queries can be forwarded to an attacker's server. The author warns that end-user warnings and social trust networks are insufficient and recommends a centralized review process to reduce the risk of Trojan-horse style updates and large-scale abuse.