Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Our Chrome Extension Is Safe

blog.pushbullet.com

Post reply on HN
Print view View original

121–130 of 206 posts

Re: Our Chrome Extension Is Safe

#121

Post by ncallaway »

thephyber wrote: post #111
woofie11 wrote: post #84

Earlier quoted context omitted.

You're confusing two things: laxness strictness scale carefulness/competence carelessness / incompetence scale Google tries to do this with automated processes and minimum wage drones, which results in both million dollar extensions being bump AND widespread malware being let through.

> Google tries to do this with automated processes and minimum wage drones Do you have an alternative suggestion for how they could do it better?

Yes, but it involves spending more money.

Re: Our Chrome Extension Is Safe

#122

Post by ehsankia »

ocdtrekkie wrote: post #41
_fat_santa wrote: post #25

You know this wouldn't be so much of an issue if Chrome didn't disable the ability to install extensions outside of the web store. As an extension developer its absolutely infuriating to realize that: 1. There is no way to install extensions outside the web store 2. Google won't approve anything to the web store. 3. The vast majority of people use Chrome vs other browsers. ------ I get it, Chrome is Google's browser…

It's worth noting that the Chrome Web Store is currently full of malware and most malware I see on PCs was installed via the Chrome Web Store. By design, HTTPS does not protect your privacy at all if you have extensions that violate it, since they see what you see after TLS termination. So this is a huge deal, Google is already bad at it, but I can't fault them for heavily restricting extension install: Currently the…

You do realize that the original Pushbullet issue arose from Google trying to be even more strict and reduce the amount of malware, right? And even with all that, as you mention, CWS is still full of malware.

What hope does any other store then have to create a malware free web store if even Google can't? And if they allow installation from anywhere, do you realize that whatever state we are in now, it would be orders of magnitude worse?

If there is some way to get malware into your computer, someone out there will make you do it. That's exactly why installing extensions is so locked down. I don't understand how people think that it will magically all be better if users were given full access to install whatever from wherever. Have you never in your life interacted with an average non-poweruser?

Re: Our Chrome Extension Is Safe

#123

Post by tacotime »

coffeefirst wrote: post #86
gnicholas wrote: post #33

Earlier quoted context omitted.

At least it’s possible to side load extensions in Chrome. I’ve been more disappointed in Firefox, which doesn’t allow this at all, even in the developer release. The only thing similar to side loading that is allowed is a temporary debug process, which loads an addon but only until the browser is restarted.

You can! It's far more annoying, but I've been running a few that I've made for myself In `about:config`, set `xpinstall.signatures.required` to false, and then you can an unsigned bundled extension locally and they'll persist like normal extensions.

If this is not in the MDN refs anywhere yet, it really should be. I’ve been battling with web-ext for a week now after something mysterious broke that I’ve not yet been able to fix. I’m so glad you posted!

Re: Our Chrome Extension Is Safe

#124

Post by pgrote »

renewiltord wrote: post #103
pgrote wrote: post #80

Earlier quoted context omitted.

I am a premium pushbullet user and have it on my android phone. It is the only reliable solution to handle texting and notification from the Windows or Chromebook desktop I have come across. I've never thought about the information they capture or keep, but I do know photos sent through text are kept on https://dl3.pushbulletusercontent.com for a certain period of time. I don't know how long.

You don’t use messages.android.com?

I know it as messages.google.com. It doesn't work among multiple desktops concurrently.

Re: Our Chrome Extension Is Safe

#126

Post by fireattack »

_fat_santa wrote: post #25

You know this wouldn't be so much of an issue if Chrome didn't disable the ability to install extensions outside of the web store. As an extension developer its absolutely infuriating to realize that: 1. There is no way to install extensions outside the web store 2. Google won't approve anything to the web store. 3. The vast majority of people use Chrome vs other browsers. ------ I get it, Chrome is Google's browser…

> There is no way to install extensions outside the web store

> The vast majority of people use Chrome vs other browsers.

Can you even do it with Firefox any more?

Re: Our Chrome Extension Is Safe

#127

Post by juped »

Wow, they used the "complaining online and getting enough upvotes" support channel. It should not reflect well on companies when they fix things that come to their attention this way.

Re: Our Chrome Extension Is Safe

#128

Post by skykooler »

fireattack wrote: post #126
_fat_santa wrote: post #25

You know this wouldn't be so much of an issue if Chrome didn't disable the ability to install extensions outside of the web store. As an extension developer its absolutely infuriating to realize that: 1. There is no way to install extensions outside the web store 2. Google won't approve anything to the web store. 3. The vast majority of people use Chrome vs other browsers. ------ I get it, Chrome is Google's browser…

> There is no way to install extensions outside the web store > The vast majority of people use Chrome vs other browsers. Can you even do it with Firefox any more?

Yes, you can do so through the about:debugging page.

Re: Our Chrome Extension Is Safe

#129

Post by sixothree »

wintermutestwin wrote: post #85
graham_paul wrote: post #70

Earlier quoted context omitted.

Maybe just maybe, you will consider Firefox. 1. Same or better performance 2. Open source for real not just (pretending to be) Open Source 3. More transparent process 4. No business conflicts Support Firefox if you care about the open web

I use firefox as my primary browser, but I have recently ran into issues with several sites that I need to use. Whenever I contact support, they tell me their site requires Chrome. As it is, I have a Winblows box for gaming only that I put Chrome on, but one day, I am going to be remote and needing Chrome. I don't want google's tentacles on my work laptop, but am starting to worry that I have no choice...

Edge dev uses chrome under the hood and you don't sell your soul to google.... Just to MS.

Re: Our Chrome Extension Is Safe

#130

Post by dblohm7 »

driverdan wrote: post #88
wintermutestwin wrote: post #85

Earlier quoted context omitted.

I use firefox as my primary browser, but I have recently ran into issues with several sites that I need to use. Whenever I contact support, they tell me their site requires Chrome. As it is, I have a Winblows box for gaming only that I put Chrome on, but one day, I am going to be remote and needing Chrome. I don't want google's tentacles on my work laptop, but am starting to worry that I have no choice...

Which sites? Name and shame. If you absolutely must use Chromium you can use Brave instead. It doesn't solve the extensions issue discussed here but at least it cuts out most of the Google garbage.

> Which sites? Name and shame.

Or even better, report them to https://webcompat.com

Post reply on HN