Live data from Hacker News

Chrome users beware: Manifest v3 is deceitful and threatening

eff.org

21–30 of 396 posts

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#22
post #15
post #11

If Google actually gave a crap about security, they would let you disable extensions. As it is, I have to routinely delete malicious extensions from every family member's Chromebook. Lord knows how they get there, but they always do. Since this new standard still lets extensions observe everything, I don't see what the point is.

Chrome allows you to disable installation of extensions via Group Policy for a looong time now: https://security.stackexchange.com/questions/66239/how-to-pr...

That's windows-only, right?

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#23
post #17
post #6

Earlier quoted context omitted.

My assumption is that Firefox will be implementing the standard, but not the restrictions. Am I wrong there?

I'd guess even if Firefox did keep extensions unrestricted then slowly they would die away - given how much smaller the user base will be. We need some new power to emerge in this space.

I believe they would gain users from Chrome, where you won't be able to block ads anymore.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#24
post #5

If Chrome can kill uBlock and use its dominance to do user-hostile stuff, and Firefox goes along "in the interest of cross-browser compatibility", then what the hell's the point of Firefox in the first place?

I think you mean “what open web?”

Back to IRC DCC style sharing and distributed computing with VPN

No need to follow the money to do interesting engineering and computing. Interesting is subjective and wrapping a white paper in the cruft to host it as a service in the cloud isn’t interesting engineering

Part of me wonders if the chip shortage is real or just a way to hide big corp hoovering them up for DC hosted services.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#25
post #7

I have a couple of popular extensions on the line, and I no longer see a way to stop Google without immediate government intervention. I am confident that they are not acting entirely in good faith, regardless of the much needed and useful parts of Manifest V3. They will get away with anything, be fined again in a couple of years for the growing list of illegalities they commit, and now they'll also harm the browser…

Make them first class Firefox extensions.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#26
The security argument seems pretty simple. The end goal is that legit extensions that people regularly install should not need to ask for dangerous permissions, because a) it teaches the users that it's normal and b) since the extensions can become compromised later and abuse the permissions. Adblockers are probably the most common kind of extension, and are currently granted effectively unlimited access to read and modify every single web page you use. That's fucking scary.

If adblockers (and other classes of legit and common extensions) can be migrated to a safe API, it makes the unrestricted and dangerous API much more manageable since what's left is much less likely to be legit or something people actually care about. For example you can have enhanced review processes, warn users more forcefully about the danger, start limiting the power of the API, implement new safe APIs for some of the remaining use cases, etc.

EFF are smart people. They know what the actual security benefit is, and choose to instead argue against a caricature.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#28
post #20
post #11

If Google actually gave a crap about security, they would let you disable extensions. As it is, I have to routinely delete malicious extensions from every family member's Chromebook. Lord knows how they get there, but they always do. Since this new standard still lets extensions observe everything, I don't see what the point is.

This post carries a lot of water for user-hating user-blaming anti-extensions. I'm sorry that your family are... having such a hard time making reasonable choices for themselves. I have literally never seen this anywhere, or heard any coworker ever report their family rampantly adding shitty extensions. I tend to see pretty clear & obvious signals about what extensions are good & ok when I go to consume. Bad extensio…

> I'm sorry that your family are idiots.

Stopped reading there, mate.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#29
post #12
post #8

I've been using Chrome for such a long time now (since like a year after it launched), out of convenience and because it used to be fast (and more secure). It's definitely time to switch. I think my main alternatives are Brave, Vivaldi and Firefox.

Please Firefox. The first two are just Chrome wrappers.

Well I like both Brendan and Jon, and I actively dislike Baker's leadership of Mozilla. However, Mozilla seems to have the highest investment level into the their desktop browser. I'll test Brave first.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#30
post #12
post #8

I've been using Chrome for such a long time now (since like a year after it launched), out of convenience and because it used to be fast (and more secure). It's definitely time to switch. I think my main alternatives are Brave, Vivaldi and Firefox.

Please Firefox. The first two are just Chrome wrappers.

You realize Firefox only exists because it serves Google's interests right?

And while Brave might be based on Chromium, it is distinct; in addition to not crippling nativewebrequest as chrome will, it's native adblocker is compatible with the same lists as ublock origin. So I would go with Brave :)

Post reply on HN