Don’t Auto-Update Safari Extensions
Lex Friedman (via John Gruber):
Thus, the mythical A Decidedly Un-Evil Extension, which could provide the definition of any word you double-clicked on, could seem noble and safe. After a few months of swelling popularity, the extension’s nefarious creator could update the extension with <iframe> evilness, and start gathering personal information about you, from the webpages you visit.
With auto-updating, you probably wouldn’t know that the extension had been updated. Even with manual updating, you have no way of knowing whether the new version has been vetted for security.
2 Comments RSS · Twitter
"Off topic, but if you've got a glass trackpad, BetterTouchTools rocks the casbah. Just discovered it, and thought I should share."
Well, since I hyped it, I should now issue a caveat:
It's still buggy as all hell. It works, but it often breaks down and requires an OS X restart every couple of days. Still recommended, but only if you want to play with the bleeding-edge.
Off topic, but if you've got a glass trackpad, BetterTouchTools rocks the casbah. Just discovered it, and thought I should share.
It provide ultimate customization over trackpad gestures. It's like the Trackpad.prefpane done for a control freak.
It's changing my usage patterns for the better like nothing I've run across since QuicKeys.