search

eight04 / image-picka

A Firefox/Chrome extension helping you download images.
MIT License
171 stars 19 forks source link

privacy guarantee #305

Open TwistedFromArma opened 2 years ago

TwistedFromArma commented 2 years ago

what promise of privacy is there with this addon?

It looks really good but then the install asks to access all data from all websites. That seems a little invasive for downloading images in a smarter way.

eight04 commented 2 years ago

what promise of privacy is there with this addon?

This extension doesn't collect your data. It doesn't send any web request except those images you are going to download.

the install asks to access all data from all websites. That seems a little invasive for downloading images in a smarter way.

https://github.com/eight04/image-picka/blob/6a05e976ea111ab6a5ea719cd176071c1a0caf39/src/static/manifest.json#L20

This allows the extension to fetch images from all domains, which enables these features:

  1. Fetch image info so you can filter images based on file size and dimension.
  2. To download images from cache. (Though currently it is buggy.)

https://github.com/eight04/image-picka/blob/6a05e976ea111ab6a5ea719cd176071c1a0caf39/src/static/manifest.json#L32

This allows the extension to inject content scripts to all web pages, which enables these features:

  1. Register event handler so that you can download a single image via (double) click and drag-n-drop.
  2. Collect images from pages, including background pages or frames.
bumbaras commented 1 year ago

It is just as stupid as google privilages policy. Your question (OP) is justified, anyone can have doubts. Addon needs access to data to download images. In the past browser didn't ask about such things, now the consent must be explicit. Problem is, like in google, some privilages were assembled into one, like "allow addon access data". I think addon which source code is accessible by anyone would not contain any harms in author consent. Beside, if addon would share datas from each user to author, i think headache for author would be granted.