3 ms·
I suppose it can read/write the browser's cookie database whenever the browser isn't running -- or maybe even when it's running, I don't know. That would enable
by tomsmeding 8y ago
I suppose it can read/write the browser's cookie database whenever the browser isn't running -- or maybe even when it's running, I don't know. That would enable using Google Analytics just as if it was a webpage.
Do not forget that native code running locally is at least as powerful as X, for almost any X that you can use on your computer. (The only thing that's more powerful than that, is native code running locally as root.)
- davchana 8y agoReally? I thought browsers encrypt their user data & such with some type of user credentials?
- gruez 8y agoSuppose that's the case. How does the browser get the credentials? It's probably not from the user, because I never heard of a browser that requires a password at startup. It could be from the OS, but native "apps" aren't sandboxed, nor are they signed, so the OS has no way of differentiating between 2 apps.
- stephenr 8y ago> nor are they signed macOS apps are increasingly signed, because there are additional steps a user must take to run unsigned apps.
- icebraining 8y agoChrome on Windows encrypts the passwords using the Windows encryption functionality, which is tied to the user's account. Any software running on the same account can decrypt them.
- davchana 8y agoOh ok, so but in chrome, I have to type my windows password to reveal my saved password. Can a native.exe app do that without requiring me to type my windows password?
- icebraining 8y agoYes; Chrome doesn't actually use that password you type for anything, it just checks if it's correct - the function literally returns a single boolean. As soon as you're logged into your Windows account, they are available. In fact, if it wasn't so, Chrome would have to ask you for the Windows password for every form it wanted to fill with a password.