4,439 karma · joined April 19, 2013
You literally have a proton email address on your profile.
But I do know what it's like working in a draconian safety-crazy job where if you're caught not following a safety-related SOP you're basically fucked.
I can't blame them too much.
Edit: thought I'd include a link to a study about this as it's not well known. https://www.cell.com/current-biology/fulltext/S0960-9822(19)...
0) scripts and plugins should only be able to operate on the text in the vault. Just like how I expect a snippet of JavaScript running in my browser to only have access to the website and not to my entire disk.
1) Any commands that run outside of this sandbox need to be approved first. Obviously this could get annoying, but there's tricks you could use here to help.
Obviously this is a high level approach and I'm not on their team, so this is basically armchair programming. But since you asked, it's okay. ;)
I don't know of any large community ran utilities, just small ones. I'm guessing the scale starts being a problem eventually.
Most of this document reads to me like that's the problem they're trying to solve, not just chrome's huge marketshare, so simply not targeting it doesn't serve their purpose.
This hit me hard. This article is art. I think I need to sleep on this and read it again in the morning.
This would be a silly thing to use to identify bots.