I'll be sure to tell my employer that my services are no longer need because some jerk on Lemmy thinks that File.readAsArrayBuffer() and SubtleCrypto.encrypt() packaged up in an extension that needs no special permissions, no companion app, and is limited to activating on a single named website, is like totally gonna scan my whole hard drive, man, what a drag.
You really are a dunce.
So you don't understand that, either? When your only argument is insult, that's ad hominem. You never addressed any of the valid criticism of your fear mongering, other than to repeat the same misinformation.
You're calling me wrong because you think I'm "full of it" without being able point to anything that's factually incorrect about what I've said.
Still going. I never saw the very first edit of your content, but the bullshit is still there:
They can snoop / manipulate across tabs or even scan the local drive and execute system commands... when given the access.
Extensions cannot scan local drives, other programs that one installs in addition can. like I already explained, OP wouldn't need a companion program, so you're incapable of admitting (or maybe understanding?) that you're spreading baseless FUD about OP's proposed idea.
> Says they wrote an extension 3 years ago but doesn't seem to know about decade-old isolation.
> Tries to tell everyone that extensions like OP's can run system commands, despite their use case not having any need to do so.
> Accuses others of being full of it.
Jog on, mate.
I know what native messaging is, and I'm not "full of it" because native messaging does exactly nothing at all unless the user explicitly installs software at the system level to receive those messages and act upon them. If the user doesn't know the difference between installing an extension in a browser and downloading & executing local programs, that's an education problem, but having to do some separate installation step is a useful security obstacle. It's much safer compared to old school extensions.
Also, Firefox Quantum came out in 2017, which used the manifest permissions system (wasn't Chrome ahead of them?), so the tech you were originally talking about is older than 9 years, not 3.
When was the last time you wrote an extension? Long gone are the days when they could run system commands, and permissions must be declared in the manifest or they cannot be used, so if they aren't in there, they're not being used.
That and Asterix.