Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Meanwhile, any plugin can do anything.


Sure, but that's not the issue raised by the article

And if it was the other way around, I guess people would be complaining about how closed it is for the developers

I think part of its success is due to the ecosystem composed of hundreds of plugins.


It reads like that to me:

> Since Obsidian isn’t distributed through the Mac App Store, it isn’t required to use sandboxing,

> Combined with the fact that its source code isn’t public,

> And that many users rely heavily on Community Plugins (some of my friends have customized their Obsidian setups so much that I barely recognize the app),

> And that users often grant Obsidian access to sensitive folders like iCloud Drive, Documents, or Desktop (protected by TCC or not), etc to open Vault.

> To me, this represents a very serious risk.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: