[flagged]
Let's build a Chrome extension that steals as much data as possible
291–300 of 320 posts
Re: Let's build a Chrome extension that steals as much data as possible
#292Earlier quoted context omitted.
> (a) we obviously considered this in the first version of extensions and did not allow permissions "below" the fold Irrelevant. > (b) Chrome's extension model dramatically improved on the previous state of the art which was Firefox's "every extension can do everything, extensions can't be uninstalled completely, and there's no review" Irrelevant. > (c) the install dialog is just one part in a bigger system which inc…
This is a needlessly combative reply. Your interlocutor is not sitting at the interrogation table.
Re: Let's build a Chrome extension that steals as much data as possible
#293Re: Let's build a Chrome extension that steals as much data as possible
#294Re: Let's build a Chrome extension that steals as much data as possible
#295Sample of accounts: ChillNilly, LadyXaga, NerdAlerts, SuperDud, QueenBean, Moonshining, LetFree, FoxyFox22, TurkeyTurtle, LovableLily, BeingBean, CandyRandy, AdorableLama, WiseWolfie, WoozyWarrior, PenguinPeace, SunnyHorsey, SunnyMaylor, WiseSnail, ZappyHippo, FriendlyFlame, PudgyPanda, FriendlyFlame
Re: Let's build a Chrome extension that steals as much data as possible
#296Earlier quoted context omitted.
Extensions cannot touch each other. They also can't touch other websites without an escape hatch, because sometimes you want your password manager to modify the DOM and fill in your password for you.
extensions have to touch other websites to be useful
Re: Let's build a Chrome extension that steals as much data as possible
#297This is a spicy essay for sure but what is the author's actual point? If the user grants you permission to do all these things, then you have permission to do all these things. If you can't be trusted and abuse that permission then you are not ethical. If you aren't ethical someone will find out and your extension will be removed in the worst case and simply not approved in the common case. The author even admits as…
It's very early for users to not understand and for apps to ask for a bunch of permissions. One great example is Grammarly, which is a keylogger that helps users with grammar. I don't think Grammarly has bad intentions, but still, millions of users are giving it access to everything they type.
Re: Let's build a Chrome extension that steals as much data as possible
#298Earlier quoted context omitted.
This is a needlessly combative reply. Your interlocutor is not sitting at the interrogation table.
I admit it is a bit combative, but his response took absolutely zero responsibility and expressed zero concern for what is in my mind a huge and inexcusable security oversight. Countering an acting apologist for a de facto monopolist corporation is also needed, or else we end up with complacency and rot.
Re: Let's build a Chrome extension that steals as much data as possible
#299Re: Let's build a Chrome extension that steals as much data as possible
#300What's up with the tons of fresh accounts (all created 3 days ago) posting plagiarized snippets in the comments? Various snippets from news articles, Quora, etc. Sample of accounts: ChillNilly, LadyXaga, NerdAlerts, SuperDud, QueenBean, Moonshining, LetFree, FoxyFox22, TurkeyTurtle, LovableLily, BeingBean, CandyRandy, AdorableLama, WiseWolfie, WoozyWarrior, PenguinPeace, SunnyHorsey, SunnyMaylor, WiseSnail, ZappyHipp…