3 ms·

The amazing thing here is: A few of my non-programmer friends told me that they would NEVER install a Chrome extension that can access all their data. At the s

by r3m6 14y ago

The amazing thing here is: A few of my non-programmer friends told me that they would NEVER install a Chrome extension that can access all their data. At the same time, all of them have no issue at all to install a regular Windows application from, say, Download.com. They are surprised when I tell them that any Windows application can not only access all their data but could also format their hard drive... To cut a long story short: Google does a good job of educating users. Microsoft should follow (and innovate with a more fine grained security system).

deleted 14y ago
[deleted]
- daeken 14y ago
  > Chrome extensions are worse than just "accessing all your data", since they actually inject code into running web apps en masse. At least with Windows, they'd have to patch a particular binary (and it's non-trivial to so). There's no need to patch binaries -- you can hook just about everything you want. Whether you want to intercept networking, file IO, or just about anything else, it's trivial with tools like Easyhook. A binary running under your account has complete control of everything happening under your account, in essence, and exercising that control is never hard.