• 0 Posts
  • 5 Comments
Joined 9 months ago
cake
Cake day: October 7th, 2023

help-circle
  • I hate Temu, but this (apparently contracted?) Grizzly Reports report isn’t really all that trust inspiring, tbh.

    Our experts identified a stack of software functions that are completely inappropriate to and dangerous

    The stack difference to the Amazon app they list:

    • Package compile
    • Requesting system logs
    • Some code obfuscation
    • Mac address collection
    • Install permission
    • Wake lock

    Meh. That’s just a sliver worse than your regular, off the shelves proprietary corporate app. I don’t see how they can pull off the promise of being a truly dynamic Android app from that report.

    I do believe they hover up data, but they aren’t otherworldly super hackers. They will probably just ask for the data and the users will hand it over in a second. For most people, it really is that simple.


  • Yeah, just create an entirely new, incompatible extension engine from scratch for this one feature specifically!

    This is absolutely not how any of this works.

    While Mozilla implements the WebExtensions API based on the W3C standard, they are not bound to a 100% verbatim implementation. Like other browser vendors, Mozilla has the flexibility to extend or modify the API as needed, as long as they maintain compatibility with the core standard. Adding new APIs or features to the extension system does not require creating an entirely incompatible engine. Browser vendors often add non-standard extensions to APIs, which can later be proposed for inclusion in the next version of the standard if they prove useful. So, Mozilla can certainly add new APIs to their extension system without making it incompatible with the existing WebExtensions ecosystem. This is not difficult to understand.