5 ms·
It would be better if this would be a bookmarklet and not a plugin. A plugin can read everything on every website you use. Your bank statements, your emails, w
by TekMol 4y ago
It would be better if this would be a bookmarklet and not a plugin.
A plugin can read everything on every website you use. Your bank statements, your emails, which videos you watch on youtube, to whom you talk on Twitter and what you write with them, what you search on Google ... everything.
A bookmarklet can only read what is on the page on which you invoke it.
- Kye 4y agoIt seems like the bulk of it is only a few lines going by the GitHub. I don't know enough to know how to do it, but if you do, you might offer a bookmarklet version for privacy-conscious people as a pull request. https://github.com/rugk/mastodon-simplified-federation https://github.com/rugk/mastodon-simplified-federation
- TekMol 4y agoPhew, there are so many files and lines in that repo. As far as I understand it, all that has to be done is something like: document.body.innerHTML.replace(/<some_regex>/,'<some_string>') Where <some_regex> matches strings of type @someone@someinstance.tld and '<some_string>' turns that into <a href=https://yourinstance/web/@someon@someinstance.tld>@someon@someinstance.tld</a>
- BeefWellington 4y agoYeah, it's wild to me that no major browser vendor has moved to expand the permissions system to addons. We already have the system in place for things like Camera, Mic, and Location access. Why not extend that to anything an addon can do?
- true_religion 4y agoI thought plug-ins can be scoped to only work on a single domain or only work when you click them. It’s how I run grammerly, which is a descent enough grammar checker except I never want it to correct my chat posts, or GitHub comments.
- TekMol 4y agoI have never heard about such a restriction for plugins. And on the plugin page for Grammarly, it says it gets "Access your data for all websites": https://addons.mozilla.org/en-US/firefox/addon/grammarly-1/ https://addons.mozilla.org/en-US/firefox/addon/grammarly-1/
- jdiff 4y agoYou've never seen the popups? If a WebExtension doesn't request access to all sites, it can only access sites that it's activated on by pressing the toolbar button (MDN refers to them as action buttons if you want to take a look). The problem is that most extensions that aren't site-specific are useful because they have access to all sites, but that doesn't mean that's a requirement of the system.
- TekMol 4y agoOk. Then it's probably that every time I looked at an extension it wanted access to any site.
- The_SamminAter 4y agoHeads up about Grammarly: https://news.ycombinator.com/item?id=30470457 https://news.ycombinator.com/item?id=30470457
- maxltv 4y agoYou can turn it off for specific sites (via Grammarly settings) OR you can turn it on only for specific sites (via browser settings). The process is different depending on whether you are using a browser extension or desktop integration. Here is an example for the browser extension: https://support.grammarly.com/hc/en-us/articles/115000091612-Turn-off-Grammarly-on-one-or-more-websites https://support.grammarly.com/hc/en-us/articles/115000091612...
- mawise 4y agoIs it possible for a bookmarklet to be able to find RSS autodiscovery[1] links? I've thought about building something like that but I've always been turned off by the "allow reading everything" permission. [1]: https://www.rssboard.org/rss-autodiscovery https://www.rssboard.org/rss-autodiscovery
- imurray 4y agoI've made a bookmarklet to toggle between the website for the instance you use and the one the post/user used: https://homepages.inf.ed.ac.uk/imurray2/code/mastodon.html https://homepages.inf.ed.ac.uk/imurray2/code/mastodon.html It's maybe easier to just use a separate app though, and avoid the faff of separate webpages entirely.