3 ms·
I don't feel I have a good solution to the problem of browser trustworthiness for now but here are some ideas in case anyone can build on them: - extension dev
by eitland 7y ago
I don't feel I have a good solution to the problem of browser trustworthiness for now but here are some ideas in case anyone can build on them:
- extension developers must upload a fee that gets forfeited if extension does anything shady (seriously? Who would care to make extensions then?)
- Stricter and more granular rules (it soon get to complicated)
- kevin_thibedeau 7y agoAll it takes is the ability to revoke permissions without the extension knowing. That way users can't be conned into unlocking broad swathes sensitive data with the threat of not working. This works well for apps on LineageOS.
- nishmastime 7y agoNo, an extension that has good reason to inject a script into every webpage can, with the same permissions, exfiltrate user data under a new owner. Almost all extensions thus users are vulnerable to this. There is no higher priv the script needs to ask for.