3 ms·

> By all means, change your behavior over time... By the process of pushing new versions of the extension, which can be statically analyzed, and forward-declari

> By all means, change your behavior over time... By the process of pushing new versions of the extension, which can be statically analyzed, and forward-declaring the permissions you need to accomplish your tasks. A ridiculous proposition on the web. User agency ought be able to grow & expand the wider the set of data they encounter. To propose that each new type of data encountered requires a new version of the extension is a farce. All for weak & vague & unspecified fears. Be afraid user! You need this restriction, anything else would be dangerous to you! It's been uncompromising stances, offering no middle ground, no opt-out, disregarding all valid cases. Fearocracy. Security concerns are ruling with fear & absolutism. With no public evidence no escape hatches no real accountability. This is degrading.

wvenable 4y ago
> To propose that each new type of data encountered requires a new version of the extension is a farce. How can a program operate meaningfully on data that the programmer knows nothing about? I'd love for you to describe an actual example.
shadowgovt 4y ago
> All for weak & vague & unspecified fears. Be afraid user! I wouldn't say "afraid," but "cautious" and "skeptical" are good attitudes to have regarding extensions with global permissions that can execute arbitrary JavaScript that originates from a source other than the signed files in the manifest directory, yes. https://courses.csail.mit.edu/6.857/2019/project/10-Oh-Chen-Ding-Guo.pdf https://courses.csail.mit.edu/6.857/2019/project/10-Oh-Chen-... https://www.ghacks.net/2019/07/22/how-to-search-all-chrome-extensions-for-the-dangerous-unsafe-eval/ https://www.ghacks.net/2019/07/22/how-to-search-all-chrome-e...