4 ms·

Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?

I’m going by trust of this extension but now a second time in less than a month it is asking for new permissions and it keeps getting more permissive. Any insights on this?

Baldbvrhunter 3y ago
Which OS? I haven't seen it on Linux or Mac OS High Sierra perhaps the permission system is becoming more fine grained on your system
- extractionmech 3y ago
  HighSierra running FF 72.0.2 It wants perm to “Access ip address and host information”. Why does no script want this? ps: just checking and it already has in FF + Access your data for all websites + Access browser tabs + Store unlimited amount of client-side data + Access browser activity during navigation ??? Is this all OK?
  - nusl 3y ago
    So far it makes sense to me. Perhaps look into the changelist for something related. https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/ https://addons.mozilla.org/en-US/firefox/addon/noscript/vers... From the noscript extension page it wants the flllowing: Access browser tabs Store unlimited amount of client-side data Access browser activity during navigation Access your data for all websites
    - extractionmech 3y ago
      that’s exactly what the perms are right now. question I am asking, since I have always blindly trusted No Script, is how “accessing browser activity during navigation” related to the simple job of blocking scripts from domain x? And now it wants ip address info too? Why? Keep in mind it worked all these years without additional perms. Most of those are from the last expanded permissions.
      - nusl 3y ago
        I suggest you inspect the changelog and any available code for answers you’re looking for. Ensure you don’t have a malicious alternate version. From the Firefox documentation: https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions#w_access-browser-activity-during-navigation https://support.mozilla.org/en-US/kb/permission-request-mess... The extension could listen for the steps the browser takes to navigate from a link to another page. The extension could then provide new features for the content on the page. Extensions requesting this permission might: Detect when streamed videos are about to play and provide a download feature Look for and prevent ad pop-ups from opening
        extractionmech 3y ago
        thanks.

I’m going by trust of this extension but now a second time in less than a month it is asking for new permissions and it keeps getting more permissive. Any insights on this?

Baldbvrhunter 3y ago

Which OS? I haven't seen it on Linux or Mac OS High Sierra perhaps the permission system is becoming more fine grained on your system

extractionmech 3y ago
HighSierra running FF 72.0.2 It wants perm to “Access ip address and host information”. Why does no script want this? ps: just checking and it already has in FF + Access your data for all websites + Access browser tabs + Store unlimited amount of client-side data + Access browser activity during navigation ??? Is this all OK?
- nusl 3y ago
  So far it makes sense to me. Perhaps look into the changelist for something related. https://addons.mozilla.org/en-US/firefox/addon/noscript/versions/ https://addons.mozilla.org/en-US/firefox/addon/noscript/vers... From the noscript extension page it wants the flllowing: Access browser tabs Store unlimited amount of client-side data Access browser activity during navigation Access your data for all websites
  - extractionmech 3y ago
    that’s exactly what the perms are right now. question I am asking, since I have always blindly trusted No Script, is how “accessing browser activity during navigation” related to the simple job of blocking scripts from domain x? And now it wants ip address info too? Why? Keep in mind it worked all these years without additional perms. Most of those are from the last expanded permissions.
    - nusl 3y ago
      I suggest you inspect the changelog and any available code for answers you’re looking for. Ensure you don’t have a malicious alternate version. From the Firefox documentation: https://support.mozilla.org/en-US/kb/permission-request-messages-firefox-extensions#w_access-browser-activity-during-navigation https://support.mozilla.org/en-US/kb/permission-request-mess... The extension could listen for the steps the browser takes to navigate from a link to another page. The extension could then provide new features for the content on the page. Extensions requesting this permission might: Detect when streamed videos are about to play and provide a download feature Look for and prevent ad pop-ups from opening
      - extractionmech 3y ago
        thanks.