3 ms·

> I am not wise in the ways of Firefox plugins > That's just a huge gaping security hole > If that is indeed how Firefox is designed that's the whole point

> I am not wise in the ways of Firefox plugins > That's just a huge gaping security hole > If that is indeed how Firefox is designed that's the whole point I'm trying to make! goddamit stop working on assumption and hypothetical thinking I'm a lunatic, this is a real issue and the actual way firefox works, how do you think all password manager work? here look yourself https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions#w_access-your-data-for-all-websites https://support.mozilla.org/en-US/kb/permission-request-mess... and guess what permission the language extension need? https://addons.mozilla.org/en-US/firefox/addon/automatic-spelling-language/ https://addons.mozilla.org/en-US/firefox/addon/automatic-spe...

lisper 7y ago
Go back to this ancestor comment in this thread: https://news.ycombinator.com/item?id=21323832 https://news.ycombinator.com/item?id=21323832 We're not talking about password managers here, we're talking about spelling checkers. If a spelling checker can read passwords, then Firefox has a problem that that has nothing to do with spelling checkers or password managers. You cannot safely use any plugin. Now, it's possible that Firefox does indeed have this very serious problem, I don't know. But I think it's much more likely that the FF engineers did the obvious thing and excluded password fields from being accessed by plugins by default if they can access text fields. If this were not the case, the complaint would not have been, "FF doesn't have native spell checking", the complaint would have been, "FF has this gaping security hole through which you can drive an M1 Abrams tank."
- avereveard 7y ago
  good thing then that I linked you to the very spell checker parent included to show you that it's flagged with that goddamn permission I'll put it here as well since you have missed it > https://addons.mozilla.org/en-US/firefox/addon/automatic-spelling-language/ https://addons.mozilla.org/en-US/firefox/addon/automatic-spe... you're not listening and you're having a very strong opinion on a topic you don't know about, which makes having a discussion frustrating, tedious and very unhackernews-like, the data is before your eyes, believe what you will. but if you are unwilling to listen, then why ask and answer?
  - lisper 7y ago
    > that goddamn permission What permission is that? The only permission I see is "Access your data for all websites." If that includes passwords, then FF has much bigger problems than not having native spell checking.
    - LoSboccacc 7y ago
      jesus H crhist I linked you everything you need already https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions#w_access-your-data-for-all-websites https://support.mozilla.org/en-US/kb/permission-request-mess... > Access your data for all websites > The extension can read the content of any web page you visit as well as data you enter into those web pages, such as usernames and passwords.

lisper 7y ago

Go back to this ancestor comment in this thread: https://news.ycombinator.com/item?id=21323832 https://news.ycombinator.com/item?id=21323832 We're not talking about password managers here, we're talking about spelling checkers. If a spelling checker can read passwords, then Firefox has a problem that that has nothing to do with spelling checkers or password managers. You cannot safely use any plugin. Now, it's possible that Firefox does indeed have this very serious problem, I don't know. But I think it's much more likely that the FF engineers did the obvious thing and excluded password fields from being accessed by plugins by default if they can access text fields. If this were not the case, the complaint would not have been, "FF doesn't have native spell checking", the complaint would have been, "FF has this gaping security hole through which you can drive an M1 Abrams tank."

avereveard 7y ago
good thing then that I linked you to the very spell checker parent included to show you that it's flagged with that goddamn permission I'll put it here as well since you have missed it > https://addons.mozilla.org/en-US/firefox/addon/automatic-spelling-language/ https://addons.mozilla.org/en-US/firefox/addon/automatic-spe... you're not listening and you're having a very strong opinion on a topic you don't know about, which makes having a discussion frustrating, tedious and very unhackernews-like, the data is before your eyes, believe what you will. but if you are unwilling to listen, then why ask and answer?
- lisper 7y ago
  > that goddamn permission What permission is that? The only permission I see is "Access your data for all websites." If that includes passwords, then FF has much bigger problems than not having native spell checking.
  - LoSboccacc 7y ago
    jesus H crhist I linked you everything you need already https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions#w_access-your-data-for-all-websites https://support.mozilla.org/en-US/kb/permission-request-mess... > Access your data for all websites > The extension can read the content of any web page you visit as well as data you enter into those web pages, such as usernames and passwords.