Post #1988910
2026-04-20 16:33 UTC
@matthiasott why are these browsers allowing this level of access without the explicit consent of the person!? Is Anthropic exploiting a bug in Chromium/browsers don’t can do this?
Replies (1)
-
@matthiasott@mastodon.social 2026-04-20 17:03
@macronaut Not a bug.. Native Messaging works exactly like this by design, apparently. If a manifest file appears in the right folder inside your home directory, the browser trusts it. The assumption is that anything running as you is fine by definition. And you (allowed the installer to) put it there, so… But that stuff was built for password managers etc., not an LLM agent with documented access to your DOM and authenticated sessions. Which is exactly why a vendor should ask for permission.