Post #3599442
2026-07-04 16:56 UTC
@jrdepriest@infosec.exchange @thatprivacyguy@eupolicy.social the desktop app already runs as the user? There's no escalation of privilege, you're doing what the user wants.
Like, the Claude app could spawn a localhost webserver and the extension could call out to it and achieve the same thing.
More importantly there's no spying or beginning of spying? A desktop app could just use playwright, or directly read the cookies on disk or or or... Spyware has to mean something or definitions become meaningless
Replies (1)
-
@nil@mastodon.sg 2026-07-04 17:02
@jrdepriest@infosec.exchange @thatprivacyguy@eupolicy.social It would be fine to say: claude desktop integrates with chromium derived browsers in ways I didn't expect. It's an entire other bridge to call it spyware