Hacker News Reader

At least with a browser extension you can audit the source code yourself (and know that the source is what you're installing) - with a 3rd party OAuth app you can never be sure.

That being said I don't think this app is going to do anything malicious.

View on HN

>At least with a browser extension you can audit the source code yourself

Well, often this is not easy. I've tried to audit some extensions recently but a vast majority of non-open-source extensions are minified and heavily obfuscated. Unless you invest a lot of time, it's not easy to audit the code these days.

I suppose there is a middle ground where it spits out a curl request (or something) that you could inspect and then insert your own API key into

Reply on news.ycombinator.com