News for hackers. Stuff that matters.
Re:Neat URL cleans URLs, removing parameters such as 'fbclid... by nickjj on Saturday February 22, 2020 @07:32AM (#22390681)
That was just a broad example.

What if it got a list of every link on a page and sent that and then claimed it did that to better improve the extension by figuring out which query params aren't necessary and claimed that these links help train their app / extension.

That seems reasonable on paper, but it's a wildly over the top violation of your privacy and is only slightly less invasive than an entire page response.

I don't think the above example would get denied by a reviewer and it still uses the same "can read and modify" permissions as the current extension in its current form.

Re:Neat URL cleans URLs, removing parameters such as 'fbclid... by gruez on Saturday February 22, 2020 @12:56PM (#22392291)
Then it'd probably need a privacy policy and/or disclaimer in the addon description, which in turn would cause people to find out and downrate it to obscurity.
Re:Neat URL cleans URLs, removing parameters such as 'fbclid... by nickjj on Saturday February 22, 2020 @05:57PM (#22393901)
Are you saying it wouldn't get accepted during the review unless it had that in the description?

That seems like a dangerous rule to live by if an extension is allowed to collect all of that information and it's auto-opt-in based on it existing somewhere buried in a privacy policy or long description.

We really only ever notice the permission setting because the browser puts that in front of us before agreeing to install it and it's usually a 1 liner like "hey, this extension can access everything about your browsing history".