4 ms·
Especially with the permissions you necessarily grant to this extension! The easiest way to monetize this is to sell it to somebody who will exfiltrate all your
by fwip 1y ago
Especially with the permissions you necessarily grant to this extension! The easiest way to monetize this is to sell it to somebody who will exfiltrate all your banking data with an invisible auto-update.
- jmadeano 1y agoTotally hear you on the permissions/access. I'd love to request fewer permissions, but the chrome store doesn't support that kind of permissions granting. In order for us to be able to execute your scripts that do powerful things (send notifications, save to local storage, download things, etc.), our extension needs to have those permissions itself. Google doesn't have any way for us to say our extension itself only requires permissions x, y, z but give this user script permissions j, k, l. Your browsing/page data is yours. That data is only accessed when you explicitly request to generate a script (i.e. can't generate a script to modify a page without seeing that page).
- fwip 1y agoRight - I'm sure you're not doing anything malicious. iI just amplifies the monetization concerns, because if you can't make a business out of it, the only lucrative option left (that other extensions have also done) is to sell the extension, often to somebody who is looking to prey upon the installed user base (even if they tell you otherwise.)