News for hackers. Stuff that matters.

A comment on Universal Code Execution by Chaining Messages in Browser Extensions. Parent comment

Re:Universal Code Execution by Chaining Messages in Browser ... by qingcharles on Saturday July 13, 2024 @02:24PM (#40955831)
The sad thing is, probably half the extensions I have installed have these permissions, and I see them during install and I just sigh and click OK, knowing full well the implications, but still needing that juicy extension functionality regardless.
[ Parent | on HN ]
Re:Universal Code Execution by Chaining Messages in Browser ... by macintux on Saturday July 13, 2024 @02:41PM (#40955947)
I recall wanting to install a password manager extension at my previous job, for the tool that the company uses, and even knowing that many others use it and the company doesn’t block it, I still wasn’t comfortable with the permissions it wanted.
[ Parent | on HN ]
Re:Universal Code Execution by Chaining Messages in Browser ... by meiraleal on Saturday July 13, 2024 @04:16PM (#40956559)
it is sad that the browsers ask you want to run extensions in incognito mode but don't allow to run only there
[ Parent | on HN ]