Live data from Hacker News

Chrome users beware: Manifest v3 is deceitful and threatening

eff.org

101–110 of 396 posts

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#101
post #27

Wait FF is copying this too?!?

Firefox will make it possible to upload manifest V3 extensions to their store (eventually). It's a good thing because it makes it easier to make an extension that works unmodified for both.

Chrome is additionally planning to remove support for manifest V2 as well, Firefox can't start to do this because they don't support V3 in their store yet.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#102

Earlier quoted context omitted.

You realize Firefox only exists because it serves Google's interests right? And while Brave might be based on Chromium, it is distinct; in addition to not crippling nativewebrequest as chrome will, it's native adblocker is compatible with the same lists as ublock origin. So I would go with Brave :)

What will Brave, Vivaldi, etc, do when Google makes some change that breaks the current APIs? Do they have the resources and are willing to continue to support them?

FWIW, Brave does.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#103
post #10

Earlier quoted context omitted.

I really hope so. Any good sources to find out Mozilla’s stance?

https://blog.mozilla.org/addons/2021/05/27/manifest-v3-updat... > We will support blocking webRequest until there’s a better solution which covers all use cases we consider important, since DNR as currently implemented by Chrome does not yet meet the needs of extension developers.

It would certainly be interesting they implemented blocking webRequest (just to keep compatibility with Chrome) and then added a Firefox-specific API for blocking web requests.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#104
post #94
post #81

I honestly think that Google underestimated how much they are going to piss off users with MV3. There are thousands of extensions that will stop working and be impossible to build. But also there will be a lot of broken experiences as remote loading is forbidden and fixes will need a new release. Can't wait, but that's a very good opportunity for Firefox as Firefox will become more powerful than Chrome

In the article, Firefox is cited as intending to adopt MV3 for compatibility reasons. If they indeed do so, I'm not sure how much relief running Firefox will offer from the more evil aspects of MV3.

With Firefox's market share, not much. This could massively benefit Firefox adoption, though, because everyone relying on old extensions will have to switch.

From that viewpoint, the new restrictions could actually be a good thing.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#105
post #19
post #15

Earlier quoted context omitted.

Chrome allows you to disable installation of extensions via Group Policy for a looong time now: https://security.stackexchange.com/questions/66239/how-to-pr...

I'm just not smart enough to figure that out. That first answer references steps that don't exist on any Chromebook I've ever seen. So I assume I have to enroll the machine in a group policy externally? I have no idea. Never been able to figure it out. I usually just end up installing an extension (oh, the irony) that blocks the extensions domain. :/

> That first answer references steps that don't exist on any Chromebook I've ever seen.

That's because Group Policies are a Windows-only thing.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#106
post #94
post #81

I honestly think that Google underestimated how much they are going to piss off users with MV3. There are thousands of extensions that will stop working and be impossible to build. But also there will be a lot of broken experiences as remote loading is forbidden and fixes will need a new release. Can't wait, but that's a very good opportunity for Firefox as Firefox will become more powerful than Chrome

In the article, Firefox is cited as intending to adopt MV3 for compatibility reasons. If they indeed do so, I'm not sure how much relief running Firefox will offer from the more evil aspects of MV3.

My understanding is that they will adopt but continue to support "legacy" extensions

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#107

Mentioning again to the entrepreneurical ones here that I want to pay money for something that works like old Firefox but uses the new supposedly more secure code base. I pay for IntelliJ so why not pay for the just as important browser if I can get one that I like? Just don't increase the pricing to Jetbrains level until you have Jetbrains level features.

I'd pay for Vivaldi if I had to at this point, it's the only browser that feels "feature-complete" to me

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#108

Does anyone know how the Manifest v3 changes will affect extensions that modify pages for accessibility reasons?

As long as those extensions don't fetch and execute any JavaScript that hasn't been bundled at the time of Chrome store submission, they'll be fine. The biggest change happens at the API for monitoring and managing web requests.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#109
post #4

Previously extensions could be background pages, with access to DOM & Web Platform apis. MV3 currently reduces them to Service Workers, able to use far far far less capabilities. This is a massive massive downgrade for Extensions, unfathomable really. A Mozillaian proposed a less limited Limited Events Page but Google has snubbed it & not discussed. https://github.com/w3c/webextensions/issues/134 Extensions are force…

> I generally find Google to be quite a good steward for the web & am so happy they advance so many different initiatives & capabilities.

I don't. Especially not with FloC[0][1].

[0]: https://www.eff.org/deeplinks/2021/03/googles-floc-terrible-... [1]: https://developer.chrome.com/docs/privacy-sandbox/floc/

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#110
post #81

I honestly think that Google underestimated how much they are going to piss off users with MV3. There are thousands of extensions that will stop working and be impossible to build. But also there will be a lot of broken experiences as remote loading is forbidden and fixes will need a new release. Can't wait, but that's a very good opportunity for Firefox as Firefox will become more powerful than Chrome

[deleted]
Post reply on HN