Hacker News new | ask | show | jobs
by soulofmischief 173 days ago
Extensions can steal data. https://www.pcmag.com/news/uninstall-now-these-chrome-browse...

It's irresponsible for OpenAI to let this issue be solved by extensions.

2 comments

(Tamper|Grease)monkey scripts are easy to review, which is why I prefer them over the normal extensions.

Also, they're easy to write for simple fixes rather than having to find, vet, and then install a regular extension that brings 600lbs of other stuff.

Not if you actually read what the extension does and drag and drop it into chrome yourself.

Don't install from the web store. Those ones can auto-update.

Your suggestion is to not use the platform as intended, and to understand the source code of the extension. That advice is not actionable by non-technical people and does not help mitigate mass surveillance.
LLMs can pretty easily read source code and tell you what it does. It's completely actionable for any motivated person.
Still sidestepping around the inherent need for some level of technical capability and motivation. The average person has no idea what "source code" is, and an LLM is not going to make them meaningfully understand in one conversation. If the LLM just says, "trust me bro you're good", now we have just moved the problem of trust to something even more inscrutable.
Ok, should we just use the provided 'app' and assume things are fine? FAANG or whoever take our privacy and security very seriously, you know!

The only reasonable approach is to view the code that is run on your system, which is possible with a extension script, and not possible with whatever non-technical people are using.

I don't know what point you're trying to make, but I already expect OpenAI to maintain records of my usage of their service. I do not however want other parties to be privy to this data, especially without my knowledge or consent.