←back to thread

410 points morsch | 1 comments | | HN request time: 0.735s | source
Show context
AmazingTurtle ◴[] No.43983064[source]
We feel your pain at Nextcloud. Our team at Everfind (unified search across Drive, OneDrive, Dropbox, etc.) has spent the past year fighting for the *drive.readonly* scope simply so we can download files, run OCR, and index their full-text for users. Google keeps telling us to make do with *drive.file* + *drive.metadata.readonly*, which breaks continuous discovery and cripples search results for any new or updated document.

Bottom line: Googles "least-privilege" rhetoric sounds noble, but in practice it gives Big Tech first-party apps privileged access while forcing independent vendors to ship half-working products - or get kicked out of the Play Store. The result is users lose features and choices, and small devs burn countless hours arguing with a copy-paste policy bot.

replies(6): >>43983826 #>>43984105 #>>43984961 #>>43985478 #>>43986485 #>>43987706 #
stavros ◴[] No.43985478[source]
As a user, this should be up to me to decide, not up to Google. However, I do find it odd that Apple can get away with it much more, because Apple's customers generally have more of a "save us from ourselves" mentality.
replies(5): >>43985889 #>>43987486 #>>43987957 #>>43989252 #>>43990188 #
pmdr ◴[] No.43989252[source]
As a user, you're to be no longer trusted with such a thing as full and unconditional access to the device you bought. Browsers are headed the same way. And a large crowd here on HN is okay with this, because "security."
replies(3): >>43989321 #>>43989622 #>>43992510 #
apitman ◴[] No.43989622[source]
I was under the impression browsers have been implementing more hardware access, not less, if slowly. What are you referring to?
replies(1): >>43989818 #
DecentShoes ◴[] No.43989818[source]
Manifest V3? No ad blockers in Chrome?
replies(1): >>43989854 #
1. apitman ◴[] No.43989854[source]
I'm embarrassed I didn't immediately think of that, thanks.