Live data from Hacker News

Google Removed ClearURLs Extension from Chrome Web Store

github.com

301–310 of 369 posts

Re: Google Removed ClearURLs Extension from Chrome Web Store

#301

Just to add my own data point: I have some extensions in the Chrome Web Store and, from time to time, Google send me a notice that they violate privacy policies (but they don't collect any data) or some permissions are not used (but yes, they are). So, after explaining and linking to the source code, they usually reply with another canned response: Thank you for reaching out to us. We took a closer look at your item…

Sufficient incompetence is indistinguishable from malice, and should be treated similarly (at least when dealing with companies). In my opinion, a company that regularly flags things that are complaint with the rules is Bad regardless of motives.

From what I can see it may be:

- A bad or gone-bad automated system;

- Outsourced incompetent people;

- A try to soft push out what they don't like (it still takes patience and effort to deal with this);

- Some mix in between.

For sure, malice or not, it's flawed.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#302

Earlier quoted context omitted.

Mozilla has been playing a little bit better here, but let's not forget Mozilla could remove the addon on pretty much in the same way. Case in point: Firefox on mobile has a selected _whitelist_ of addons you can install, and that's it.

I was under the impression that the new Firefox for Android has not implemented all plugin APIs yet, and thus can't run most of the plugins. Of course there will be plugins that do work and are not whitelisted right now, and they need to get on that, but it's not just whitelisting for the sake of whitelisting

By default, you are I deed right.

However, you can use Firefox Nightly and install any extension you want.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#303

Earlier quoted context omitted.

Security paranoia is ruining the independent Internet and putting more power in the hands of companies like Google.

I remember back when adware, spyware, and viruses ran amuck on PC’s thanks to lax Windows XP security design and an open internet without any effort to protect users. It was bad. We do need to decentralize the decision making but the progress toward making the web safer for average folks is good.

Freedom isn't free. An open internet where users take reaponaibility for taking risks is preferable to a safe but locked down and centralized internet.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#304

uBlock Origin is already able to detect these URL trackers. Maybe it should start removing them as well.

The Stealth Mode in AdGuard AdBlocker does that [1]. I use that one on mobile to keep my number of installed extensions to a minimum for performance.

[1] https://kb.adguard.com/en/general/stealth-mode#general

Re: Google Removed ClearURLs Extension from Chrome Web Store

#306
post #295

Earlier quoted context omitted.

If you don't like the risk this poses, don't use the extension. Your ability to make informed decisions about risk vs reward keeps getting chipped away when Google pulls this kind of stuff off. Google should warn you about the security risks (edit: or just remove it from the public facing store and only keep the hard to guess URL active) but don't tell me what extensions I'm allowed to use or not. Even adding local e…

I disagree with this stance. Pulling extensions that have a large potential for abuse is absolutely in Google's prerogative, in my opinion. Suppose our single maintainer decided to finally sell the extension, and the person who bought it made it so that all those links hijacked information or exposed you to malware. This would happen in one day without warning. How many people would be saying that was Google's fault…

Google's perogative is to make as much money as possible, not make the web a better place.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#307
post #37

I'd love to use ClearURLs, though last I checked it had a major flaw: it allows arbitrary code execution by the provider of the filter list. Among other things, it can redirect script URLs to arbitrary sources, and the filter list is periodically updated from a GitLab page, which enables the filter list provider to perform a targeted attack by serving a malicious filter list to a specific device. The only filter list…

Thanks for mentioning this. While I did install it upon seeing the news on removal, I'll go without it for now and hope for a similar project from the EFF.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#308

Earlier quoted context omitted.

Security paranoia is ruining the independent Internet and putting more power in the hands of companies like Google.

I remember back when adware, spyware, and viruses ran amuck on PC’s thanks to lax Windows XP security design and an open internet without any effort to protect users. It was bad. We do need to decentralize the decision making but the progress toward making the web safer for average folks is good.

If we put everybody in jail we don't have to worry about crime anymore! That's a lot easier than trying to have an informed public who can exercise caution and learn to assess risk in their lives. Besides, only a very small market segment of hardcore freedom enthusiasts really care about freedom. There's not enough money in that market segment to be worth the investment. Most everybody will happy watching television in their cells. Anybody who doesn't like it is welcome to go to the jail run by our one competitor.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#309

Earlier quoted context omitted.

There's profiles in browsers these days, and computers usually have multi account support too.

and 11 year olds grab the computer when you're not there and use it, actually from the age of 8 I think. But yes, browser profiles and computer multi account support are tools that would solve this problem if they worked for the particular problem description - which fair to say they weren't really designed for that scenario so no reason to expect they would work.

I always lock whenever I'm not around it, that'd force the 11 year old to use their own designated non-admin account on the machine too.

Re: Google Removed ClearURLs Extension from Chrome Web Store

#310
post #295

Earlier quoted context omitted.

I disagree with this stance. Pulling extensions that have a large potential for abuse is absolutely in Google's prerogative, in my opinion. Suppose our single maintainer decided to finally sell the extension, and the person who bought it made it so that all those links hijacked information or exposed you to malware. This would happen in one day without warning. How many people would be saying that was Google's fault…

Google's perogative is to make as much money as possible, not make the web a better place.

You can level this charge at almost anyone. It might be true in certain ways, but it’s not an informative criticism.
Post reply on HN