Post #3599441

@nil@mastodon.sg @thatprivacyguy@eupolicy.social The bridge runs outside the browser's sandbox at user privilege level [1], and Native Messaging hosts do not surface in any standard macOS process or permission UI, they are invoked by the browser and communicate over stdio. This is the capability that Anthropic pre-stages on my laptop the moment I install their desktop application. Without telling me. Without asking me. Without offering me the chance to say no. Also, the eleven point "Dark Patterns" section and then the security and privacy that sections at the end lay it out well. This is the staging phase of the spyware. It matters less what it is doing right now and more how Anthropic put it in a position to do a great many things without telling the user about any of it. The hooks are all embedded and can be pulled when Anthropic (or a malicious actor who injects instructions) wants to.