News for hackers. Stuff that matters.
Re:Let's guess what Google requires in 14 days or they kill ... by lvs on Wednesday May 13, 2020 @05:25PM (#23172015)
Edit: I was the one who misread it. My mistake
Re:Let's guess what Google requires in 14 days or they kill ... by mkl on Wednesday May 13, 2020 @06:02PM (#23172339)
I think you're the one misreading. From the article: "We do not need to request access to data on https://*/* and http://*/*. Instead, we can simply request data access for https://*.pushbullet.com/*, http://*.pushbullet.com/*, and http://localhost/*."
Re:Let's guess what Google requires in 14 days or they kill ... by vntok on Wednesday May 13, 2020 @05:59PM (#23172324)
> As I looked at the permissions and what our extension actually needs to operate, I noticed a great opportunity to reduce our permissions requests. We do not need to request access to data on https://*/* and http://*/*. Instead, we can simply request data access for https://*.pushbullet.com/*, http://*.pushbullet.com/*, and http://localhost/*. This is a huge reduction in the private data our extension could theoretically access. A big win!

They were completely in the wrong there, and posing a huge security risk to all of their users.