4 ms·

Worst advice. Imagine the risks you are putting yourself into when trusting all these 3rd-party browser extensions https://palant.info/2022/08/10/anatomy-of-a-b

Worst advice. Imagine the risks you are putting yourself into when trusting all these 3rd-party browser extensions https://palant.info/2022/08/10/anatomy-of-a-basic-extension/ https://palant.info/2022/08/10/anatomy-of-a-basic-extension/ It's better to use something like piped that has the following features: https://github.com/TeamPiped/Piped#features https://github.com/TeamPiped/Piped#features

bulbosaur123 4y ago
Is it really that bad? If the extension has a ton of reviews, doesn't it sort of vouch for credibility? And if they say they can't "read or change data on this website"?
- rahidz 4y ago
  The big issue has been trusted, harmless well-liked extensions where the developer gets offered a nice shiny payout, transfers control to WeSellYourData Inc, and now everything feels the same except for the surreptitious tracking of everything you do.
- ementally 4y ago
  >>If the extension has a ton of reviews, doesn't it sort of vouch for credibility? Yes and no. You can't be really sure. They might contain vulnerabilities https://portswigger.net/research/ublock-i-exfiltrate-exploiting-ad-blockers-with-css https://portswigger.net/research/ublock-i-exfiltrate-exploit... not necessarily intended. You can read more here https://github.com/beerisgood/Security-link-collection https://github.com/beerisgood/Security-link-collection , "Some examples why browser extensions are bad - since at least....." >>And if they say they can't "read or change data on this website"? Extensions need access to those to make changes on webpages you visit. However, you can go to manage extension and limit to specific pages instead of all sites. That's why Google is going for Manifest V3.
bakugo 4y ago
Thank you for your contribution towards the slow but steady death of browser extensions and browser customization in general, we really appreciate it.
halicarnassus 4y ago
I only use extensions which have the ability to be limited by the browser to certain sites. Then any potential damage is limited. E.g. I use an ad-blocker to insert JavaScript only on one site: YouTube.com. But I use an anonymous dummy Google account for YouTube. So if anything gets compromised, I don't really care.

bulbosaur123 4y ago

Is it really that bad? If the extension has a ton of reviews, doesn't it sort of vouch for credibility? And if they say they can't "read or change data on this website"?

rahidz 4y ago
The big issue has been trusted, harmless well-liked extensions where the developer gets offered a nice shiny payout, transfers control to WeSellYourData Inc, and now everything feels the same except for the surreptitious tracking of everything you do.
ementally 4y ago
>>If the extension has a ton of reviews, doesn't it sort of vouch for credibility? Yes and no. You can't be really sure. They might contain vulnerabilities https://portswigger.net/research/ublock-i-exfiltrate-exploiting-ad-blockers-with-css https://portswigger.net/research/ublock-i-exfiltrate-exploit... not necessarily intended. You can read more here https://github.com/beerisgood/Security-link-collection https://github.com/beerisgood/Security-link-collection , "Some examples why browser extensions are bad - since at least....." >>And if they say they can't "read or change data on this website"? Extensions need access to those to make changes on webpages you visit. However, you can go to manage extension and limit to specific pages instead of all sites. That's why Google is going for Manifest V3.

bakugo 4y ago

Thank you for your contribution towards the slow but steady death of browser extensions and browser customization in general, we really appreciate it.

halicarnassus 4y ago

I only use extensions which have the ability to be limited by the browser to certain sites. Then any potential damage is limited. E.g. I use an ad-blocker to insert JavaScript only on one site: YouTube.com. But I use an anonymous dummy Google account for YouTube. So if anything gets compromised, I don't really care.