3 ms·
A slight tangent but is anyone else disappointed with the Chrome permissions system? The granularity of what you can allow is often inappropriate for what you r
by whoopdedo 11y ago
A slight tangent but is anyone else disappointed with the Chrome permissions system? The granularity of what you can allow is often inappropriate for what you really need to do. Example, the author of uBlock Origin needed to be able to turn off prefetching for obvious reasons. But the permission for it was grouped into the label "Control Security Settings". This confused a lot of people who became suspicious of what the extension was actually doing.
It makes me think of how Windows with it's very comprehensive mandatory access control remained vulnerable to simple attacks because the ACLs were too complicated. Thus application developers would request overly broad permissions, defeating the usefulness of the security model.
Seems to me that having too many difficult to use security features can be as bad as or worse than too little security.