Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

>We suggest Chrome team to follow Opera’s approach, or at least whitelist UserScripts.org globally.

I could be wrong, but I don't think userscripts does any significant culling of their catalog; downloading an arbitrary script from there is just as dangerous as anywhere else. This whole thing is just silly, you have to confirm the installation of a javascript extension. If you accept that it's your responsibility if it turns out to be a keylogger or what have you, not the Chrome team's. They're shooting everyone in the foot because someone might accidentally shoot their eye out.



It's more like adding a safety that actually works (unlike clickthrough warnings). If you know what you're doing, you can do a search and learn how to drag and drop. Anyone who needs handholding for this shouldn't be doing it.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: