News for hackers. Stuff that matters.

A comment on Massive spying on users of Google's Chrome shows new security weakness. Parent comment

Re:Massive spying on users of Google's Chrome shows new secu... by lifty on Thursday June 18, 2020 @03:37AM (#23560712)
I don’t see why it wouldn’t be possible to make a more granular extension permission system that also has stricter sandboxing. Safari is already going in that direction. The new extension system is more restricted, although I don’t know if there is any granularity to it.
[ Parent | on HN ]
Re:Massive spying on users of Google's Chrome shows new secu... by moritonal on Thursday June 18, 2020 @03:54AM (#23560811)
So WebExtensions support this, even dynamic permissions (like on Android). But I've found I've had to push developers to use it because it makes their life a bit harder and it's already a side-project.
[ Parent | on HN ]
Re:Massive spying on users of Google's Chrome shows new secu... by kevingadd on Thursday June 18, 2020 @04:09AM (#23560892)
The UX for the dynamic permissions and fine-grained permissions is, to be generous, not good. I never saw any expressed desire or commitment from the Chrome team to improve on this which is likely why so many extensions still just request blanket access instead.
[ Parent | on HN ]