this post was submitted on 24 Nov 2023
0 points (NaN% liked)

Firefox

17880 readers
106 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago
MODERATORS
 

This is a plugin I found recently and really enjoy. It gives you the opportunity to redirect several webpages to alternatives. For example Youtube to FreeTube or Piped. If I search for youtube in Firefox, FreeTube automatically opens and shows me my feed. I like it, I use it, I can recommend it.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 0 points 11 months ago (2 children)

I keep thinking about installing this, but the required permissions seem a bit excessive:

This add-on needs to:

  • Input data to the clipboard
  • Access your data for all websites

Anyone know if the 'All Access' permission is really required for what this is doing? It just feels wrong. There isn't some sort of "Control Navigation for These Domains" that it could request for each enabled site or something is there?

[–] [email protected] 0 points 11 months ago (1 children)

"Access your data for all websites" is important because otherwise it doesn't know what domain you're on in the first place.

[–] [email protected] 0 points 11 months ago (1 children)

Access browser tabs
Access browser activity during navigation

are enough to do that.

[–] [email protected] 1 points 11 months ago

Maybe the devs don't know that. Could you open an issue on this?
Asking you because you may know more about these permissions than me.

I've been using the addon for some time, and while it's good now, there were some silly mistakes in the past. What I'm trying to say is that maybe they're just relatively a beginner, and it haven't yet occurred to them to revisit the permissions.

[–] [email protected] 1 points 11 months ago (1 children)

It's open source, you can ask the author and other users about it too (if you can't read the code yourself)

[–] [email protected] -1 points 11 months ago* (last edited 11 months ago) (1 children)

Oh, I'm confident(-ish) in my ability to review the code, but as I understand it I have no way to guarantee that the code that's on github is the code that AMO installs. Plus updates are automatic, so I have no way to ensure that something malicious won't be added anyway.

[–] [email protected] 1 points 11 months ago (1 children)

You can build it yourself from source then.

[–] [email protected] -1 points 11 months ago (1 children)

You can only do that with Firefox Developer, can't you? And IIRC, they self uninstall after a week or something, don't they?

[–] [email protected] 1 points 11 months ago* (last edited 11 months ago)

You can either install it unsigned with Firefox Developer Edition and it will be permanent. Or you can sign it yourself (you don’t need to publish it on AMO): https://extensionworkshop.com/documentation/publish/signing-and-distribution-overview/ and it will work on regular Firefox.