Post #1988943
2026-04-21 10:53 UTC
@matthiasott
like,
1password is also malware by this definition
the directory exists so that software you install that might want to talk to browser extensions can configure itself.
if this is a "backdoor" the chromium team put it there
Replies (1)
-
@aura@gts.foxsnuggl.es 2026-04-21 10:57
@matthiasott the "trust boundary" is you not installing the claude extension. that's why native messaging hosts have to specify extension IDs via allowed_origins. this is how it's supposed to work.