I wonder how you think about trusting oj-hn as a vendor? The extension looks great.
I sympathize with the desire to release programs/code anonymously or semi-anonymously on the internet. I noticed you don't particularly tie the extension to any identity (unless I'm missing something).
Maybe extensions are more constrained than I realize. Specifically it looks like the manifest has "host_permissions: ['https://squeeze.oj-hn.com/*']," and then presumably the only leakable thing is private contact email or votes. Maybe the chrome api content of the tabs/history permissions also (seems silly for chrome not to scope that to the startUrls though?) Not 100% sure I'm understanding correctly though.
alt Hacker News
I wonder how you think about trusting oj-hn as a vendor? The extension looks great.
I sympathize with the desire to release programs/code anonymously or semi-anonymously on the internet. I noticed you don't particularly tie the extension to any identity (unless I'm missing something).
Maybe extensions are more constrained than I realize. Specifically it looks like the manifest has "host_permissions: ['https://squeeze.oj-hn.com/*']," and then presumably the only leakable thing is private contact email or votes. Maybe the chrome api content of the tabs/history permissions also (seems silly for chrome not to scope that to the startUrls though?) Not 100% sure I'm understanding correctly though.