Permissions of Chrome 'Hive Keychain' add-on

in #misc3 years ago

Well, I just created my Hive/PeakD account, and I have to say, its not really a good thing that this key management add-on requires 'Permission to read and change all data on all websites you visit'.

You can limit the websites any add-on gets executed on in 'Manage extensions', but I still urge the developer to change that borlerline dangerous setting.

:)

Untitled.png

Sort:  

Hi,
I'll copy paste my answer on Github and upvote for better visibility:

To function, Hive Keychain needs to inject code into dApps so that these dApps can make requests back to Keychain.
That s what make it possible to login, vote, transfer etc. via Keychain.
Since new dApps are popping up all the time, we can't maintain a list of whitelisted dApps and are instead injecting this code in every page.

same issue applies to firefox extension.

Please contact the development team.
@stoodkev is the CEO (boss)

The code has been published on https://github.com/stoodkev/hive-keychain.

Congratulations @t-nil! You have completed the following achievement on the Hive blockchain and have been rewarded with new badge(s) :

You distributed more than 10 upvotes.
Your next target is to reach 50 upvotes.
You received more than 10 upvotes.
Your next target is to reach 50 upvotes.

You can view your badges on your board and compare yourself to others in the Ranking
If you no longer want to receive notifications, reply to this comment with the word STOP

Check out the last post from @hivebuzz:

Hive Tour Update - Account creation and Account Recovery steps
Support the HiveBuzz project. Vote for our proposal!