Re:Google’s Plans for Chrome Extensions Won’t Help Security
by SpicyLemonZest on Thursday August 01, 2019 @11:39AM
(#20584793)
I'm not convinced that Google can actually solve this problem by just reviewing apps more closely. It sounds like it took a lot of work for Jadali to identify a smoking gun, a lot more than Google could reasonably do preemptively or even as a response to every abuse report. And if Google had shut down three very popular accessibility apps with anything less than a smoking gun, I expect that would have been just as controversial as Manifest V3.
[ Parent
| on HN ]
Re:Google’s Plans for Chrome Extensions Won’t Help Security
by ghostwords on Thursday August 01, 2019 @11:54AM
(#20584957)
I suggest that the gulf between perfect foolproof detection and what Google actually does now is vast. They can start by banning remote code, and follow up by setting up automated flagging with manual review for popular extensions to start with. Just getting clarification from developers regarding anything suspicious would be great.
Re:Google’s Plans for Chrome Extensions Won’t Help Security
by danShumway on Thursday August 01, 2019 @02:24PM
(#20586728)
Firefox already blocks remote code execution in extensions and nobody's complaining about that. There would be nothing controversial about Chrome doing the same thing.