4 ms·
Am I the only one who finds the broad permissions that are required by many Chrome extensions crazy from a security perspective? This one can: - Access to yo
by hashtree 12y ago
Am I the only one who finds the broad permissions that are required by many Chrome extensions crazy from a security perspective? This one can:
- Access to your data on all websites
- Access data you copy and paste
Talk about a non-starter, even if I were to trust the developer. Chrome is all too happy to auto-update extensions by default. All it takes is one extension developer compromised to have a nice little copy/paste and bank-website logger that phones home. I could have trusted the developer. I could have reviewed the source code. I could do a number of things and still open up myself to risk for such things. I understand this particular extension needs said permissions, but there has to be a better way. Many extensions ask for permissions they have no need for. Looking at the install numbers, people are all to happy to hand them out. I imagine some of the trust comes via proxy of being on the Chrome store.
- gvb 12y agoThis is an extension that does copy and paste. Your complaint may be valid, but not for this extension.
- hashtree 12y agoYou are absolutely correct. My critique wasn't directed at this extension, but Chrome in general. In this instance, I'd love to see: - Access to your data on all websites (when directly activated) - Access data you copy and paste (when directly activated) It is my understanding that Chrome does not have this level of granularity in permissions currently.
- kzahel 12y agoYeah it does. Apps can have permission to the current tab when you click on their action icon (either in URL or to the right of it) I agree though that this app has permissions that are too broad.