News for hackers. Stuff that matters.

A comment on Let's guess what Google requires in 14 days or they kill our extension.

Re:Let's guess what Google requires in 14 days or they kill ... by devit on Wednesday May 13, 2020 @03:11PM (#23170559)
The fact that they were requesting https://*/* and http://*/* (i.e. full control over all your accounts) without it being absolutely necessary reflects terribly on them.

Still not clear why localhost (which can mean root access to the local machine since it may have localhost-only services that enable that) and cookies access is needed, also http://*.pushbullet.com is unnecessary since they should always use HTTPS.

If they had properly implemented the extension they may not have this problem now.

[ Parent | on HN ]
Re:Let's guess what Google requires in 14 days or they kill ... by jeromegv on Wednesday May 13, 2020 @03:34PM (#23170833)
Nobody is against enforcing better behaviors from developers, the issue is that they are not telling anyone what those issues are. I don't know why you can always count on someone to defend a multi-billion corporation against small companies, is there no empathy left?
[ Parent | on HN ]
Re:Let's guess what Google requires in 14 days or they kill ... by jholman on Wednesday May 13, 2020 @09:53PM (#23174303)
> I don't know why you can always count on someone to defend a multi-billion corporation against small companies, is there no empathy left?

I don't have empathy for companies, I (try to) have empathy for people. Small companies are made up of people. Large companies are made up of people. I try (and often fail, alas) to have empathy for the people in both cases.

[ Parent | on HN ]
Re:Let's guess what Google requires in 14 days or they kill ... by gowld on Wednesday May 13, 2020 @03:30PM (#23170794)
Why doesn't Google notify all extension devs about these issues, to get it fixed, instead of sending vague threats?
[ Parent | on HN ]
Re:Let's guess what Google requires in 14 days or they kill ... by KCUOJJQJ on Wednesday May 13, 2020 @03:56PM (#23171090)
Does Google send this message to random developers ([1]) and then look at the changes that developers make to get a list of things that developers apparently think are not so good?

[1] https://en.wikipedia.org/wiki/Thirty-Six_Stratagems#Stomp_th...

[ Parent | on HN ]