Ask HN: NoScript (Firefox) is asking for ever expanding permissions. Why?

[extractionmech]

I’m going by trust of this extension but now a second time in less than a month it is asking for new permissions and it keeps getting more permissive.

Any insights on this?

[Baldbvrhunter]

Which OS? I haven't seen it on Linux or Mac OS High Sierra

perhaps the permission system is becoming more fine grained on your system

[extractionmech]

HighSierra running FF 72.0.2

It wants perm to “Access ip address and host information”. Why does no script want this?

ps: just checking and it already has in FF

+ Access your data for all websites

+ Access browser tabs

+ Store unlimited amount of client-side data

+ Access browser activity during navigation

???

Is this all OK?

[nusl]

So far it makes sense to me. Perhaps look into the changelist for something related. https://addons.mozilla.org/en-US/firefox/addon/noscript/vers...

From the noscript extension page it wants the flllowing:

Access browser tabs

Store unlimited amount of client-side data

Access browser activity during navigation

Access your data for all websites

[extractionmech]

that’s exactly what the perms are right now. question I am asking, since I have always blindly trusted No Script, is how “accessing browser activity during navigation” related to the simple job of blocking scripts from domain x? And now it wants ip address info too? Why? Keep in mind it worked all these years without additional perms. Most of those are from the last expanded permissions.

[nusl]

I suggest you inspect the changelog and any available code for answers you’re looking for. Ensure you don’t have a malicious alternate version.

From the Firefox documentation:

https://support.mozilla.org/en-US/kb/permission-request-mess...

The extension could listen for the steps the browser takes to navigate from a link to another page. The extension could then provide new features for the content on the page.

Extensions requesting this permission might:

Detect when streamed videos are about to play and provide a download feature Look for and prevent ad pop-ups from opening

[extractionmech]

thanks.