POOR SOFTWARE WITH SERIOUS PRIVACY ISSUES
This company has recently altered their terms of use, and now force you to allow it to: "Read and change all your data on all websites" before being able to install their Chrome extension.
Pardon me? Nobody in the world should allow any company from any country that sort of access, let alone one you know nothing about. It is outrageous that they think they can get away with this sort of behaviour. Obviously, I didn't install the extension, but took a look at their online offering, with all my strict privacy measures in place. I wasn't impressed. It's alright for some really basic image editing functions, but certainly not worth the risk of dealing with a company that forces their Chrome extension customers to give permission for them to spy on their every browsing move. That is evil.
Why not just agree and grant them permission? Granting a company permission to "Read and change all your data on all websites" can have significant security and privacy implications. Here are some potential risks associated with such broad permissions:
Data Access and Collection:
The company can access and collect data from all websites you visit. This includes personal information, browsing history, login credentials, and any other sensitive data you may input on websites.
User Privacy Invasion:
Allowing such extensive access can lead to a severe invasion of privacy. The company may track your online activities, analyse your behaviour, and potentially use the gathered information for targeted advertising or other purposes without your consent.
Security Vulnerabilities:
By having the ability to change data on websites, the company could introduce security vulnerabilities. Unauthorized modifications to web content might lead to issues like injected malicious scripts, phishing attempts, or other cyber threats.
Credential Harvesting:
If the company has the ability to read all data on websites, it could potentially capture login credentials, payment information, and other sensitive details, posing a significant risk to your online accounts and financial security.
Cross-Site Scripting (XSS) Attacks:
Allowing changes to data on websites opens the door to possible Cross-Site Scripting attacks. This could enable the injection of malicious scripts into websites, compromising the security of both the site and the users interacting with it.
Loss of Control:
Granting such extensive permissions means relinquishing control over your online data. The company could manipulate or misuse the information in ways that may not align with your interests or expectations.
Regulatory Compliance Concerns:
Depending on your location, allowing such access may violate privacy regulations. It's important to consider the legal implications and whether the company is compliant with data protection laws.
In summary, the security implications of agreeing to these permissions are substantial, ranging from privacy invasion and data misuse to potential security vulnerabilities. Users should carefully evaluate the necessity of such permissions and consider alternative tools or services that prioritize user privacy and security.
You wouldn't give your keys or bank details to a stranger who asked for them, so DO NOT TRUST LunaPic.com. It's plain and simple.
