Netscape Plug-in Application programming interface
Default full access to OS
The plugin can do everything under the SUN
No access control
Inprocess DLL, if the plugin crashes the Browser will crash
Only way to leverage native code
Mozilla Firefox has reduced support for NPAPI
Google started whitelisting plugin