Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google Removed ClearURLs Extension from Chrome Web Store

github.com

Post reply on HN
Print view View original

201–210 of 369 posts

Re: Google Removed ClearURLs Extension from Chrome Web Store

#201

Post by teddyh »

iSnow wrote: post #58
Andrew_nenakhov wrote: post #21

An extract from the Rules of the Internet, 2021 edition: - don't use Chrome - don't use Google Search

I tried, but I find each and every Google Search alternative lacking. I frequently have to hunt down some bug descriptions or other stuff related to coding and Google Search is really hard to beat. Even tried Bing, lol

If alternatives to Google were better than Google, we wouldn’t have to tell people to use them. The whole point is to use alternatives even though they are not as good, because to aid Google is not acceptable.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#202

Post by aj3 »

Const-me wrote: post #184
deallocator wrote: post #130

Earlier quoted context omitted.

I don't disagree with what you're saying, but I feel HTTPS everywhere does not belong in that list. Secure by default doesn't sound evil to me, and Let's Encrypt made it easy enough to get free HTTPS certificates (and for non technical people, almost all hosting services I've seen offer it out of the box)

> Let's Encrypt made it easy enough to get free HTTPS certificates Just checked. My hosting provider asks 2x more money for SSL addon (which includes unique IP, unlimited subdomains, and free certificate). They wrote on the support forum I need that addon regardless on which certificate I gonna use, the included free one, or any other like lets encrypt. Not gonna switch hosting nor pay 2x more for it just to please G…

Your hosting provider sounds incompetent. There is no need for unique IP to host TLS encrypted website, SNI support nowadays is ubiquitous. Let's Encrypt issues wildcard certificates for free as well.

There is no technical reason for asking 2x more money for encryption in 2021.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#203

Post by tough »

b112 wrote: post #180
yurielt wrote: post #117

Earlier quoted context omitted.

It seems as if google or is eh moles are monitoring this site because it is not the first time a reasonable anti google comments gets treated like this with no replies explaining why

Bear in mind, that many subconsciously are unhappy with their workplace's policies and effects on the world, but at the same time have linked their personal esteem and identity with work. By threatening their self esteem, their very identity, by validating what the know deep inside them, that they work to do evil, without wanting to, they must strongly reject/defy such claims to reassert and restore their veiled view…

“It is difficult to get a man to understand something, when his salary depends on his not understanding it.”

Re: Google Removed ClearURLs Extension from Chrome Web Store

#204

Post by aj3 »

Const-me wrote: post #195
shermheadryder wrote: post #186

Earlier quoted context omitted.

> Not gonna switch hosting nor pay 2x more for it just to please Google. Let's not pretend that HTTPS only exists to please Google. It has very real benefits for your users.

My web site has no comments or other user-generated content, runs no CMS, uses no cookies, collects no data except standard web server logs, hosts no executables, and has no secret nor security sensitive content.

Without encryption active attacker could redirect users to different website, which would collect more data than your website does normally. They could also inject ads and javascript into users' sessions through your website.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#205

Post by dessant »

dessant wrote: post #37

I'd love to use ClearURLs, though last I checked it had a major flaw: it allows arbitrary code execution by the provider of the filter list. Among other things, it can redirect script URLs to arbitrary sources, and the filter list is periodically updated from a GitLab page, which enables the filter list provider to perform a targeted attack by serving a malicious filter list to a specific device. The only filter list…

I can no longer edit my comment, if someone has the time, please verify this vulnerability and follow up with the maintainer and Firefox reviewers, remote code execution is against add-on guidelines. My impression is that the maintainer is not malicious, though someone could exploit them or the filter list service, and hack the entire userbase of the extension.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#206

Post by Const-me »

iSnow wrote: post #58
Andrew_nenakhov wrote: post #21

An extract from the Rules of the Internet, 2021 edition: - don't use Chrome - don't use Google Search

I tried, but I find each and every Google Search alternative lacking. I frequently have to hunt down some bug descriptions or other stuff related to coding and Google Search is really hard to beat. Even tried Bing, lol

I think you're observing personalized search. Next time it happens, try asking DDG a better question, e.g. include "programming" in the query.

Even ignoring privacy and data collection, I find personalized search problematic. Unreliable across computers / VMs, broken across browsers / OS reinstalls, and most importantly not portable across users, you can't tell other people how exactly you found stuff.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#207

Post by Closi »

madeofpalk wrote: post #159

I really struggle to believe that "Google" thinks this itty bitty extension that a rounding error % of their users use would have an impact on their buisness model, which was grounds to kick it off the store. This "just" sounds like the typical story we hear so often of an overzealous "app" reviewer waking up on the wrong side of the bed and just decided to delete someone's product and/or business (which is a huge pr…

One extension does not have an impact, but in aggregate across many extensions these things can make a huge difference.

The primary reason Google has Chrome and Android is to maintain ecosystem control and to continue tracking users to support it's Ad business (or reduce the threat that other browsers will diminish it's business in these areas).

Re: Google Removed ClearURLs Extension from Chrome Web Store

#208

Post by madeofpalk »

hhjj wrote: post #168
madeofpalk wrote: post #160

Earlier quoted context omitted.

> Let's Encrypt has de facto monopoly. Is that even remotely true? There are alternatives to Lets Encrypt - AWS has an equivalent project where they issue free SSL certs for AWS resources.

If it is for AWS resources it is not equivalent.

Equivalent in the sense that, if you're in AWS (which is a non-insignficant amount of people) then you have options other then Lets Encrypt.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#209

Post by wepple »

Const-me wrote: post #195
shermheadryder wrote: post #186

Earlier quoted context omitted.

> Not gonna switch hosting nor pay 2x more for it just to please Google. Let's not pretend that HTTPS only exists to please Google. It has very real benefits for your users.

My web site has no comments or other user-generated content, runs no CMS, uses no cookies, collects no data except standard web server logs, hosts no executables, and has no secret nor security sensitive content.

At Starbucks I can inject arbitrary content into the browser of anyone who visits your site over HTTP and take control of their browser.

Furthermore, congrats on your site but you’re 0.01% of sites like that. Should we keep an insecure web because your hosting provider is ripping you off? TLS is easy and free in 2021.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#210

Post by dandanua »

I wrote a very basic extension Copy True Link https://github.com/dandanua/copy-true-link

It doesn't remove all trackers from the URLs yet, but at least you can copy what is displayed at the status bar when you hover over the link. It's useful since a lot of tracking sites (like FB) substitute that status bar link for the tracking one before clicking.

I think I'll add some cleaning process in the future.

Post reply on HN