Boo

[mrlachatte]

There goes my great discovery of greasemonkeyed.  This message makes it clear that GreaseMonkey is a huge security risk as of this moment (as does atrustheotaku's post) and I've disabled GM until further notice, or at least until 0.3.5 becomes compatible with Deer Park.

Comments

[mrlachatte.livejournal.com]

If you don't have the neutered version, a website with appropriately malicious Javascript that matches any Greasemonkey script (even *) can retrieve any file on your hard drive and send it anywhere on the internet.

[wardrich.livejournal.com]

wow! That's sort of weird. I thought greasemonkey was only one-way and that the sites wouldn't know you had it on. That's some CRAZY security hole, though. Could the sites that took advantage of this hole be in trouble for invasion of privacy?