Am I the only one who finds the broad permissions that are required by many Chrome extensions crazy from a security perspective? This one can:
- Access to your data on all websites
- Access data you copy and paste
Talk about a non-starter, even if I were to trust the developer. Chrome is all too happy to auto-update extensions by default. All it takes is one extension developer compromised to have a nice little copy/paste and bank-website logger that phones home. I could have trusted the developer. I could have reviewed the source code. I could do a number of things and still open up myself to risk for such things. I understand this particular extension needs said permissions, but there has to be a better way. Many extensions ask for permissions they have no need for. Looking at the install numbers, people are all to happy to hand them out. I imagine some of the trust comes via proxy of being on the Chrome store.