Re:Browser extensions are underrated: the promise of hackabl...
by seagulls on Sunday February 04, 2024 @03:20PM
(#39253995)
The bar to write secure desktop software is significantly higher than for browser extensions. Especially with all the Electron crap these days, you're one XSS away from full-blown RCE.
[ Parent
| on HN ]
Re:Browser extensions are underrated: the promise of hackabl...
by jwells89 on Sunday February 04, 2024 @03:32PM
(#39254126)
Absolutely, but the short and long terms risk posed to most by installing random browser extensions willy-nilly is still almost certainly higher than that of instead opting for vetted desktop apps, especially if using PWAs in place of Electron apps where possible (which I do).
Re:Browser extensions are underrated: the promise of hackabl...
by asadotzler on Sunday February 04, 2024 @04:47PM
(#39254845)
Desktop apps are no more vetted than Firefox extensions.
Re:Browser extensions are underrated: the promise of hackabl...
by jwells89 on Sunday February 04, 2024 @04:58PM
(#39254939)
I’m talking about community vetting. It’s usually easier to find discussions on the internet where people have discussed and scrutinized desktop apps (e.g. “this app phones home”) than it is to find the same for most browser extensions (which are often only heard about after having been turned into malware).
The tooling is often better there too, e.g. one can keep a short leash on app network activity with Little Snitch and similar but I’m not aware of an equivalent for browser extensions.