Post #1988911
2026-04-20 17:03 UTC
@macronaut Not a bug.. Native Messaging works exactly like this by design, apparently. If a manifest file appears in the right folder inside your home directory, the browser trusts it. The assumption is that anything running as you is fine by definition. And you (allowed the installer to) put it there, so…
But that stuff was built for password managers etc., not an LLM agent with documented access to your DOM and authenticated sessions. Which is exactly why a vendor should ask for permission.
Replies (1)
-
@macronaut@mas.to 2026-04-20 17:27
@matthiasott thank you for the details and full context! Using a browser is getting really exhausting… since Chromium doesn’t do this; I am hoping that either this gets “fixed”, so that explicit permission is requested the first time, or the other vendors that build their browsers on top of Chromium fix it at least for their products since these companies keep touting “privacy” as a differentiating factor.