News for hackers. Stuff that matters.

A comment on “Stylish” browser extension steals all your internet history. Parent comment

Re:“Stylish” browser extension steals all your internet history by applecrazy on Tuesday July 03, 2018 @07:59AM (#17449422)
Actually, Chrome does this too:

> Chrome prompts the user if adding the permissions results in different warning messages than the user has already seen and accepted.[1]

[1]: https://developer.chrome.com/extensions/permissions

[ Parent | on HN ]
Re:“Stylish” browser extension steals all your internet history by Spoom on Tuesday July 03, 2018 @09:41AM (#17450074)
The thing with Chrome extensions is, many, many extensions already require the ability to interact with every page you visit, which is essentially Chrome extension root. If your extension already requires this, you don't need to add permissions when you update / sell your extension, so nobody is warned.
[ Parent | on HN ]