Re:Let's guess what Google requires in 14 days or they kill ...
by lvs on Wednesday May 13, 2020 @05:25PM
(#23172015)
Edit: I was the one who misread it. My mistake
[ Parent
| on HN ]
Re:Let's guess what Google requires in 14 days or they kill ...
by mkl on Wednesday May 13, 2020 @06:02PM
(#23172339)
I think you're the one misreading. From the article: "We do not need to request access to data on https://*/* and http://*/*. Instead, we can simply request data access for https://*.pushbullet.com/*, http://*.pushbullet.com/*, and http://localhost/*."
Re:Let's guess what Google requires in 14 days or they kill ...
by vntok on Wednesday May 13, 2020 @05:59PM
(#23172324)
> As I looked at the permissions and what our extension actually needs to operate, I noticed a great opportunity to reduce our permissions requests. We do not need to request access to data on https://*/* and http://*/*. Instead, we can simply request data access for https://*.pushbullet.com/*, http://*.pushbullet.com/*, and http://localhost/*. This is a huge reduction in the private data our extension could theoretically access. A big win!
They were completely in the wrong there, and posing a huge security risk to all of their users.