So, sandbox the extensions, a practical, sensible step on the path to browser as OS (contentious, but doesn’t that seem where things are going, and if we lose firefox…). I get it, it’s mr right now harm minimization, as opposed to mr right (linux or flatpak) general purpose computers in service of their users with usable security control.
Comment on Mozilla to Require Data-Collection Disclosure in All New Firefox Extensions
Treczoks@lemmy.world 1 week ago
The only issue with this otherwise great idea is that “the developer says, that…”. A browser API should have a way to only grant certain rights when this is technically disclosed, e.g. an extension can only access location data if this is (formally) declared, and must be able to cope without it if the user or any global policy disallows it.
MalReynolds@piefed.social 1 week ago
Feyd@programming.dev 1 week ago
…mozilla.org/…/permission-request-messages-firefo…
Treczoks@lemmy.world 1 week ago
So what does this new change do then? Is it just about disclosing the state to the user?