Chrome AdBlock dev pushes reassuring note to counter Chrome's scary extension warnings

Submitted by admin on Sun, 09/26/2010 - 09:00

 

The fact that Google Chrome supports extensions is great, but there's one thing I'd like tweaked: those somewhat-frightening messages Chrome displays about an extensions API access.

For example, there's Typing Speed Monitor which I recently posted. When you install it, you'll receive the following alerts:

...which certainly might look scary to the average user. TSM's developer happened to stop by a post a comment to allay those fears, stating the alerts appear "because the extension needs to use the chrome.tab.* API (which gives it access to the URL's you visit) and it needs to use "content_scripts", which are injected into HTML pages and can manipulate their DOM elements."

There's nothing to fear, however, because your data isn't going anywhere: "[Typing Speed Monitor] can't give that data to anyone else because it doesn't have permission to access other hosts."

Still, the alerts are offputting and even give more seasoned surfers cold feet when installing an extension -- which is where the alert above comes in. Michael Gundlach, who maintains AdBlock for Chrome, used Chrome's extension update support to push a reassuring note to its users about an upcoming change.

I've seen the "requires more permissions" alert before from an extension, but I haven't seen a dev take the time to explain to users what's going on. It's a smart, thoughtful move by Gundlach. Until Chrome offers more insightful (and accurate) alerts, developers might want to follow this example to avoid accidentally scaring their users.

 

Chrome AdBlock dev pushes reassuring note to counter Chrome's scary extension warnings originally appeared on Download Squad on Sun, 26 Sep 2010 09:00:00 EST.

Your rating: None Average: 5 (2 votes)

one question though

Submitted by Anonymous on Fri, 10/01/2010 - 21:51.

I am not a novice by any means, but I am also quite disturbed by this.

How does this guy force a pop up on my browser? And if he can do it now, why not whenever he wants for whatever purpose he desires.

And, if he can do it, why not anyone else?

I guess what I am asking is HOW does he get to create popups on my machine?

re: how popup

Submitted by Anonymous on Tue, 12/14/2010 - 13:40.

Extensions can force any popups they like. In this case, the extension received an automatic update, which in turn made it open a new tab (and give it focus) when it started. Calling this "forcing a popup" is both technically inaccurate and a bunch of FUD. :)

The permission system is great but need at least two changes

Submitted by Anonymous on Sun, 09/26/2010 - 17:14.

The permission system need two changes for me in both chrome and android:

  • The possibility for developers to have optional permisions, enabled or not by default. Yes a QR Code generating app may need access to my address book on android or to the urls i visit in chrome... but most of it's functionalities could do without : Users may want to be able to do a selection.
  • Developers need a way to explain why they need each permissions, say a short text and an optional link for more informations. The current UI is asking users to make a choice WITHOUT informing them. From the security and usability point of view it sucks.

Post new comment

  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
  • E-Mail addresses are hidden with reCAPTCHA Mailhide.
  • You may insert videos with [video:URL]

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.