Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

For me it's about purpose and expectations. If I installed a password manager who's purpose is to inject my passwords into password fields that's what I expect it to do. That's fine. I'm explicitly giving it permission to inject such content.

If I installed a browser extension to remove trackers from sites, I'd be surprised to find it adding in email onboarding buttons to every email entry form.

It may not be clear, but the email privacy thing is a new feature. I just checked back on the chrome store and it does now make it reasonably clear that it's part of the extension now. Fair enough. But for those who had installed before, this would have come as a surprise when it suddenly started happening. The change of purpose is surprising. This reduces trust for a brand who's entire reason to exist is built on trust from a user base who are more than the average amount of paranoid.

If I installed a speech synthesis extension who's purpose was to read out the content of a web page, I would be equally annoyed if it after an update it started verbalising extra words trying to encourage me to try out their braille books everytime I browsed Amazon. Braille books might be just what the average user of a speech extension might want. But it's still a breach of trust to start modifying other websites content for a reason you weren't explicitly given permission for.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: