Search by Image 的评价
Search by Image 作者: Armin Sebastian
Sa Ahm 的评价
评分 5 / 5
来自 Sa Ahm,3 年前'Search by Image' extension used to be and still is a fantastic extension, so truly thanks to the Developer for all their hardword, and Firefox too for it; still 5-star for that. But now it's asking for 'Mandatory Clipboard Permission' [i.e. not Optional].
I know the github explanation says it already has access to ALL data on ALL websites, so not a new concern, but forgot to consider that it does NOT have access to Firefox "Private Window" for banking transactions and other sensitive browsing. Moreover, 'Mandatory Clipboard Permission' fetches data from outside the Firefox, access system-wide and not limited to image-only... i.e. all text and everything, which makes it hugely vulnerable for passphrases or other sensitive data to be used inside "Private Window" anymore...
Prior Disabling and later RE-enabling extension before and after every banking transaction is not a good or practical option, neither keeping to using the older release and never updating... Some vulnerable permissions such as all system-wide 'Clipboard' access need to be enforced by Mozilla to be kept as 'Optional' and initially 'Disabled'... especially when something Firefox / Mozilla itself 'Recommends'; it's absolutely important to consider to avoid uncertain possibility of security and privacy breaches via firefox or its recommended extensions.
Again, please Developer, please don't think I'm unreasonably complaining, or undermining your fantastic effort that you give for the world, really really appreciate your works, but please please consider various scenarios and possible dangers in it. Thanks a ton, again.
I know the github explanation says it already has access to ALL data on ALL websites, so not a new concern, but forgot to consider that it does NOT have access to Firefox "Private Window" for banking transactions and other sensitive browsing. Moreover, 'Mandatory Clipboard Permission' fetches data from outside the Firefox, access system-wide and not limited to image-only... i.e. all text and everything, which makes it hugely vulnerable for passphrases or other sensitive data to be used inside "Private Window" anymore...
Prior Disabling and later RE-enabling extension before and after every banking transaction is not a good or practical option, neither keeping to using the older release and never updating... Some vulnerable permissions such as all system-wide 'Clipboard' access need to be enforced by Mozilla to be kept as 'Optional' and initially 'Disabled'... especially when something Firefox / Mozilla itself 'Recommends'; it's absolutely important to consider to avoid uncertain possibility of security and privacy breaches via firefox or its recommended extensions.
Again, please Developer, please don't think I'm unreasonably complaining, or undermining your fantastic effort that you give for the world, really really appreciate your works, but please please consider various scenarios and possible dangers in it. Thanks a ton, again.