Live data from Hacker News

Chrome users beware: Manifest v3 is deceitful and threatening

eff.org

201–210 of 396 posts

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#201
I remember the old days when HN users would promote the hell out of chrome. They loved it, couldn't get enough of it.

A few others, including myself, were like... um guys, this browser is created by a company that makes its money from advertising that shows in browsers, do you really think this is going to turn out well?

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#202
post #160

Earlier quoted context omitted.

There is still "block request" functionality, the change is that it's now declarative. This is the same way it works in Safari, and is (a) more efficient because you don't need to execute JS to evaluate each request and (b) more private because an ad/content blocker doesn't need to be given such broad permissions. There are serious tradeoffs (no request time js makes it less flexible) but it's still very capable and…

> (Disclosure: I work on ads at Google, speaking only for myself) Thank you for letting us know you have a giant material conflict of interest and we shouldn't trust anything you say.

Great, let me help you then.

There is still "block request" functionality, the change is that it's now declarative. This is the same way it works in Safari, and is (a) more efficient because you don't need to execute JS to evaluate each request and (b) more private because an ad/content blocker doesn't need to be given such broad permissions. There are serious tradeoffs (no request time js makes it less flexible) but it's still very capable and easily can be used to block Google ads. Docs: https://developer.chrome.com/docs/extensions/reference/decla...

(Disclosure: I don't work at Google or on ads anywhere, speaking only for myself)

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#203
post #143

Earlier quoted context omitted.

I, as an end user want to be able to install whatever dangerous software I want, especially as a power user. I understand the potential consequences and I don't want or need the handrails. Options and freedom are good. This is why browsers need to be split off from for profit organizations to be managed by entities that aren't concerned with the fallout if someone installs malicious software.

I don't think this is a great path, though. Extensions like uBlock Origin should not only be available to people like us, who understand the risk of giving extensions more permissions, and would (hypothetically) have to click through some scary warning dialogs or edit config files to allow it. Your average-Joe user probably needs extensions like this even more than we do in order to remain secure on the web.

I agree it shouldn't be available just to people like us. My assumptions here are twofold, one Google doesn't want to deal with fallout from users being harmed in anyway by an extension installed from their ecosystem. It could have real monetary and regulatory impact on them. Two, this benefits their ad business by reducing how thoroughly ads can be blocked.

I think browsers should be moved away from for profit organizations to separate non corporate stewardship. With that you remove the overall susceptibility to fallout and can try to give more freedom over the features a browser has or how deeply extensions can integrate, for everyone. You also obviously remove the immediate monetary incentive to restrict freedoms.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#204
post #188
post #163

Earlier quoted context omitted.

The safari change absolutely kneecapped content blockers. Ublock dropped it[0], and the remaining few providers, like AdGuard, have to do all sorts of trickery[1] to get even close to the same performance. If you're going to argue this is better, don't point us to such a clearly worse result. [0]: https://github.com/el1t/uBlock-Safari/issues/158 [1]: https://adguard.com/en/blog/safari-adblock-extensions.html

I'm not arguing that V3 is better -- I think that's a complicated question, and I was trying to describe some of the tradeoffs. What I am arguing is that V3 does, contra my parent, support request blocking.

It does not allow request blocking as that has been understood in the context of extensions until now

It is not a question that V3 breaks the gold standard privacy protecting extension.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#205
post #182

To anyone saying "just use Firefox", I would think again. I think Firefox is (marginally) better than Chrome, but they are also pulling some of the same bullshit: https://github.com/mozilla-mobile/fenix/issues/20736

A technical decision (on mobile) you didn’t bother looking into is not even remotely in the same ballpark as what google does. Calling firefox marginally better than chrome is just dishonest, and frankly ridiculous.

apparently you didnt bother you read my comments on the linked issue, as well as the multiple issues I linked to it, including one that I opened myself [1]. My own issue was closed as wont fix.

1. https://github.com/mozilla-mobile/fenix/issues/20647

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#206
post #187

Earlier quoted context omitted.

I’m sure you are an honest person working in good faith. But we saw very similar behavior from Google around AMP. They had a very narrow reasonable sounding explanation, and just ignored all criticism and requests from both users and publishers that didn’t fit their narrative. This went on for years. Today we know AMP was also a anticompetitive plot to kill off header bidding. Why should we to believe a word of what…

> Today we know AMP was also a anticompetitive plot to kill off header bidding. I completely disagree, and I think this will become clear as information continues to come out.

Is it in dispute that google added an intentional delay? If it's not, then it doesn't really matter what else comes out.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#207
post #166

The article is not exactly well written. I don't really follow web developments anymore because the web, well, sucks; So, after reading, I'm still not even sure what "manifest v3" is about and why I should care. I know websites track me. I know I get tons of ads. I know websites popup questions about cookies. I know they play videos that follow me around when I scroll. I know sometime in the past that shit would've b…

It's for Browser extensions. Chrome extensions (and also Firefox and Safari). a fail called the "Manifest" that tells Chrome and the extension about the extension and contains all it's permission requests. Eg: "This extensions wants to modify all webpages", which is what ad blockers need to do. Going forward extensions in the Chrome Web store will have to use Manifest v3. Which has less capabilities than previous ver…

tl;dr Extensions with embedded spyware will no longer be able to record all of your web use. Malicious ones that steal credentials will be more easily identified. These types of extensions are installed far, far more than ad blockers.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#208

I remember the old days when HN users would promote the hell out of chrome. They loved it, couldn't get enough of it. A few others, including myself, were like... um guys, this browser is created by a company that makes its money from advertising that shows in browsers, do you really think this is going to turn out well?

You may see this as naive, but there was more confidence in Google (and big tech in general) to continue to "do no evil" in those days. I personally have never been upset with my firefox experience after their big re-write a few version back. The only benefits I see with chrome lately are when sites are clearly designed and tested only for Chrome. Not much of a benefit in the grand scheme of things, obviously.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#209

I remember the old days when HN users would promote the hell out of chrome. They loved it, couldn't get enough of it. A few others, including myself, were like... um guys, this browser is created by a company that makes its money from advertising that shows in browsers, do you really think this is going to turn out well?

[deleted]

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#210

I remember the old days when HN users would promote the hell out of chrome. They loved it, couldn't get enough of it. A few others, including myself, were like... um guys, this browser is created by a company that makes its money from advertising that shows in browsers, do you really think this is going to turn out well?

[deleted]
Post reply on HN