News for hackers. Stuff that matters.
Re:Introducing chrome.scripting by ROARosen on Tuesday June 08, 2021 @11:16PM (#27443845)
> The average user will not read security warnings

The basic point of my comment is that deprecating the capabilities or the current API just because there can be a security risk in some cases for the average user is harmful to the more advanced users.

You focus on one possible solution mentioned about warning dialogs. However, there are lots of different solutions available which would allow it to run only with knowing 100% that the user knows what they're doing aside from warnings.

There can be a command line flag --developer etc. just like there is for unsafe certs.

'Use a browser that supports it' is not a solution since - as you said - Chrome has the largest user base why would a developer put in the effort to develop a solution for a minorly used browser.

Since the major browser is closing this API there will be no possible use of this type of functionality for anyone - even the users who know what they're doing.

Re:Introducing chrome.scripting by 9wzYQbTYsAIc on Wednesday June 09, 2021 @04:05AM (#27445423)
Product liability to the masses likely weighs much heavier as a concern to the developers of Chrome than does any harm done to “advanced users”. Beginner users often do what advanced users tell them too, anyhow.