Live data from Hacker News

Show HN: A Chrome extension that will auto-reject non-essential cookies

blog.bymitch.com

131–140 of 175 posts

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#131
post #9

How it’s implemented: Vibe coding is the answer Sorry, you want me to give browser privileges to code written by AI?

This is 100% a fair point of view and you’re right to be skeptical. With the blog post I was just trying to convey that cursor + auto select model was not great at this task. It gave me a project structure, but besides that everything had to be refactored.

Thanks for clarifying!

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#132

Love the idea. I wish chrome extensions had a more granular permissions structure and/or reminders/security checkups on installed extensions and their permissions. As it is the content scripts manifest permission for https://*/ * for content.js is always so jarring to see. For those that don’t know this allows the extension to run that script on every site you visit after clicking accept ONCE when you install the ext…

Google could change chome at any time to snoop on all your stuff too, yet we trust them more than extension authors?

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#134
post #90

Have you seen consent-o-matic? https://github.com/cavi-au/Consent-O-Matic https://addons.mozilla.org/en-GB/firefox/addon/consent-o-mat...

I tried consent-o-matic. Aside from the name making it sound like it says ok to all forms of tracking, it broke a few websites for me and failed to get rid of the banners on many others, and I quickly had to turn it off. TBH I'm not sure how it could be expected to work either, unless all websites use the same consent banner solution.

Om FF works fine for me for many years in combination with ublock origin.

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#136

Love the idea. I wish chrome extensions had a more granular permissions structure and/or reminders/security checkups on installed extensions and their permissions. As it is the content scripts manifest permission for https://*/ * for content.js is always so jarring to see. For those that don’t know this allows the extension to run that script on every site you visit after clicking accept ONCE when you install the ext…

Also frustrating that UBO Lite just changed from "permissionless" to requiring broad see everything permissions.

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#137

Love the idea. I wish chrome extensions had a more granular permissions structure and/or reminders/security checkups on installed extensions and their permissions. As it is the content scripts manifest permission for https://*/ * for content.js is always so jarring to see. For those that don’t know this allows the extension to run that script on every site you visit after clicking accept ONCE when you install the ext…

Fundamentally there is no reason anyone in their right mind should install an extension released by an individual with these permissions. It is a post-decryption access to every single thing you do online. It is absolutely insane to trust your web browsing to a random browser extension, even a useful one ("cloud to butt" is my favorite example of people deleting their entire security model for a joke).

Anyone can buy out or compromise this developer and slide complete takeover of your online life into an extension update.

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#138
post #118

Earlier quoted context omitted.

Definitely agree, not a fan of the permissions. The broad permissions were required from a usability standpoint. Granting permission on every site for this extension would just be a 1 to 1 replacement of clicking reject on the banner or pop up for every site. I would hope that before Chrome approves an extension to be added to the store that they are auditing the content of package.

Personally, I would still love a site-by-site "reject non-essential cookies" prompt from an extension that's in the same place, with the same UI, on every site. Still a click, but lots better than having to figure out how to accomplish it on each and every site.

Exactly. The biggest pain is to read and figure out what the next button actually does. Is the big Button an except all? Use selected? Or what ever wording they use. I might not want to block cookies for certain pages. So an extension that finally creates this single UX flow would be very helpful indeed.

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#139

Love the idea. I wish chrome extensions had a more granular permissions structure and/or reminders/security checkups on installed extensions and their permissions. As it is the content scripts manifest permission for https://*/ * for content.js is always so jarring to see. For those that don’t know this allows the extension to run that script on every site you visit after clicking accept ONCE when you install the ext…

Google could change chome at any time to snoop on all your stuff too, yet we trust them more than extension authors?

They have a strong track record and more to lose.

Re: Show HN: A Chrome extension that will auto-reject non-essential cookies

#140

Cookie banners are a bad/wrong solution to the underlying problem, but it's the dark patterns within that really piss me off. I shouldn't have to invest deep cognitive attention to "only accept mandatory" but if you're not careful many dialogs will trick you into clicking accept all after you go to the trouble to untoggle all the optional shit. The answer is to use isolation containers, aggressively reset them and no…

I hate how web sites can weasel their way around consent by simply declaring their cookies as "necessary" or "mandatory." As the Dude would say: Yeah, well, that's just like, your opinion, man. How about we have an easy-to-use "Reject ALL cookies from this site (and deal with whatever breaks)" option?

There was the "Do Not Track" header, but I don't think any sites that actually honored it. And it is deprecated now.

On Firefox we still have webRequestBlocking, so it is quite simple to block cookies. See for example https://addons.mozilla.org/en-US/firefox/addon/ximatrix/

Post reply on HN