[Security] I don’t know if Obsidan dev have think about that, but when the Obsidian plugins will open to public there will be: many noble developers as well as many who want to take advantage of the user data. As the core philosophy of Obsidian hovering around: The user is in charge of his …

I am confused because I think we are describing the same thing but then you think it’s not informed decision. If for every plugin in the store, you see on top a table that says This third party developer promises that the plugin does X, Y, Z, and doesn’t do A, B, C. (in a standardized fashion), ca…

Sadly Javascript is an extremely insecure language, just look at this . I am not sure if it’s possible to have a permission system in obsidian, but that would be really awesome. Otherwise, maybe a DSL for writing plugins for obsidian with controlled effects (similar to elm ) could make it so that au…

I love Obsidian, been obsessed with it and went through the learning curve, there was data on my notes that were not sensitive before but now I just can’t afford for it to be exfiltrated. Without really strict controls on how plugins could manipulate data I will be forced to use some alternative for…

[image] zbyte: Question, the core plugins are completely under Obsidian dev control including any libraries these could use? Yes, that’s correct.

The general attitude here talking about people needing to make their own decisions and review the code like everybody is a programmer is kind of hilarious.

Not everybody needs to check obviously. There’s a sweet spot of enough developers checking—in particular those who want to improve or fix the plugins. Once the first rogue Obsidian plugin is discovered, it will be a huge story. But this will take much longer than, say, Chrome extensions because th…

This thread is way too long to read all three years’ worth to make sure nobody has shared my thoughts. I totally understand that the Obsidian developers cannot be held responsible for making decisions about what is secure and what isn’t on behalf of the user. However, that does not mean community p…

[image] kenlefeb: A huge step in the right direction for those of us who really just wish we could use come of the most popular plugins, like Templater, Tasks, and DataView, would be for Obsidian to build into the core product the ability to whitelist plugins. If there isn’t already a feature…

some good ideas here https://www.reddit.com/r/ObsidianMD/comments/1nlyk5f/comment/nf9aknd/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button

Which ideas in that thread do you think are good, and why?

Security of the plugins