Hacker News new | past | comments | ask | show | jobs | submit login

I can't speak for everyone, but I use a tiling window manager with Firefox on a specific tag ("virtual desktop", but not) which I browse mostly using VimiumFF, an extension that gives me vim keybindings for navigation. Pressing "f" puts a small tag over each link with a set of characters (ff, jj, de, df, etc) and typing the characters in that tag opens the link.

This sounds fantastic and I was about to install it, but I paused when I saw the required permissions:

Access your data for all websites Read and modify bookmarks Get data from the clipboard Input data to the clipboard Access browsing history Display notifications to you Access recently closed tabs Access browser tabs Access browser activity during navigation

... this seems excessive - especially clipboard and historical items.

Those are all necessary permissions since the plugin is basically building a completely new keyboard-driven chrome. It is not simply a skin that remaps a bunch of key bindings.

For example, to open a bookmark from the command line requires read access to your bookmarks in order for the plugin to present you with the list of bookmarks and eventually allow you to search or navigate it somehow. The same applies to opening something from your browsing history or resurrecting a closed tab. Tab switching requires access to the tabs. Clipboard access is for things like copying URLs or the selection in visual mode to the clipboard.

Vimium itself is open source on GitHub and you can see for yourself what it's doing with your data. The Firefox port is by one of the most active project contributors.

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact