Simon Willison
https://twitter.com/simonw
•
Sep 29
I genuinely worry about how easy it would be for malicious people to convince naive users to "add this script to get X" when the script actually just steals their passwords and cookies for every site they visit
