nostalgy-xpi icon indicating copy to clipboard operation
nostalgy-xpi copied to clipboard

Unnecessary permissions are a blocker

Open iandunn opened this issue 3 years ago • 1 comments

I started to install this, but then it requested:

Have full, unrestricted access to Thunderbird, and your computer

I don't install anything that asks for more than it needs, so unfortunately I had to abort :(

I'd love to use this if you ever update to the modern permission API.

iandunn avatar May 07 '21 15:05 iandunn

If you have used the old Nostalgy in the past - there is no change in the permissions.

It is just that TB never told you in the past. All addons upto TB 68 always had unrestricted access to your PC. They always could start processes or save files. The file could have beed a virus in your autostart folder. While abuse has been caught for FF, I never read of any for TB. But you are right, technically, it was (and is) possible. If you use LibreOffice, upon saving a file, it could additionally save a virus into your autostart. So to a certain extend, a lot of software has full access to your PC, and trust is needed (or open source, where people can look at the source code).

So I fully appreciate your concerns. In the old addon system, there is no way to have limited permissions.

Unfortunately, the new apis do not (yet) allow to do what Nostalgy(++) does.

Klaus

opto avatar May 09 '21 19:05 opto