The day Chrome (and it’s derivatives) kill my extensions, is the day I switch to Firefox. I cannot live without my adblocking.
Chrome users beware: Manifest v3 is deceitful and threatening
281–290 of 396 posts
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#282If Google actually gave a crap about security, they would let you disable extensions. As it is, I have to routinely delete malicious extensions from every family member's Chromebook. Lord knows how they get there, but they always do. Since this new standard still lets extensions observe everything, I don't see what the point is.
This post carries a lot of water for user-hating user-blaming anti-extensions. I'm sorry that your family are... having such a hard time making reasonable choices for themselves. I have literally never seen this anywhere, or heard any coworker ever report their family rampantly adding shitty extensions. I tend to see pretty clear & obvious signals about what extensions are good & ok when I go to consume. Bad extensio…
[deleted]
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#283Earlier quoted context omitted.
Get a DNS Sink (such as pfblockerNG-devel). Works without Add-Ons or client config and in any browser. uBlock Origin is really only used on my computer for when I am not at home.
No DNS based solution comes anywhere close to what uBO offers. You can hide elements you don't like. You can block individual scripts or resources in a web page, even if they are first party resources. No DNS sink solution can do that. Browsing the internet would be an extremely bad experience for me if I just relied on a DNS sink.
Generally, I agree - the two complement each other. The difference is that uBO is client side and its use can be detected. A DNS sink will work, no matter what was configured on the server end. Further, the DNS sink will hide elements - everywhere ADs are placed I see simple whitespace. Finally, scripts are blocked from even getting loaded - e.g. stats for the top scripts blocked today (2 hours in) for me:
Count:Type:Blocked Domain
4154:DNSBL_A:browser.pipe.aria.microsoft.com; 445:DNSBL_A:googleads.g.doubleclick.net; 421:DNSBL_A:www.googleadservices.com; 414:DNSBL_A:app-measurement.com; 356:DNSBL_A:in.treasuredata.com; 283:DNSBL_A:incoming.telemetry.mozilla.org; 254:DNSBL_A:reports.crashlytics.com; 239:DNSBL_A:config.inmobi.com; 146:DNSBL_A:telemetry.sdk.inmobi.com; 125:DNSBL_A:www.googletagmanager.com;
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#284It's hard to take EFF seriously when they write so hyperbolically. What's clearly also the case is that Chrome extensions are one of the great modern security and privacy challenges --- to the point where multiple tech company security teams have people whose job it is just to screen them. Another detail that EFF doesn't want to share is that ad blockers are some of the worst offenders --- they demand maximal access…
Every time someone mentions this I have to think about the messed up ecosystem of Safari Webextensions. Safari only allows extensions installed via the apple store, but every single adblocker there is a scam. I'm not kidding you, I audited most of them. Chances are it's either a three years outdated list of adblock plus that doesn't catch anything or it's an extension that replaces all google analytics identifiers wi…
Do you want to call out any particularly malicious ad blockers here? Just in case I happen to have installed one of them.
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#285I miss the early days of Firefox extensions (circa 2004) where an extension could in very powerful ways completely change the layout/functionality of your browser; when they had near unlimited access to the XUL and could change anything and everything. I used a ton of very useful extensions then. Nested tabs were one of my favorites. These days I've got a password manager, a bookmark checker, and a tab manager I wrot…
Has nothing to do with "normies". With the old extension system, Mozilla couldn't make any substantial changes to browser internals (like multi-process, among other things) without breaking everything. It makes sense to have clear boundaries between the core and extensions, and keep implementation details out of the extension interface.
That's only a partial motivator. A lot of things aren't allowed, even within those boundaries, for "security" reasons.
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#286It's hard to take EFF seriously when they write so hyperbolically. What's clearly also the case is that Chrome extensions are one of the great modern security and privacy challenges --- to the point where multiple tech company security teams have people whose job it is just to screen them. Another detail that EFF doesn't want to share is that ad blockers are some of the worst offenders --- they demand maximal access…
Every time someone mentions this I have to think about the messed up ecosystem of Safari Webextensions. Safari only allows extensions installed via the apple store, but every single adblocker there is a scam. I'm not kidding you, I audited most of them. Chances are it's either a three years outdated list of adblock plus that doesn't catch anything or it's an extension that replaces all google analytics identifiers wi…
I’ve used Better for a long time and it’s not a scam. It also doesn’t have access to web content.
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#287Earlier quoted context omitted.
Edge seems to be trying very hard to kill all the momentum they've gained They recently baked in a "feature" to hijack online shopping with some Pay Later garbage: https://gizmodo.com/microsoft-keeps-making-its-edge-browser-... Now they're running gross little popups if you browse to the Chrome installer in Edge: https://gizmodo.com/seriously-what-is-going-on-with-microsof... > “Microsoft Edge runs on the same techno…
Too be honest I don’t think the messages to use edge over chrome are really in the same category as the others. Googles plaster their homepage with a big banner of “hey chrome is so much better than what your using” and did for years. A bit tit for tat in my book.
I just think it's hilarious that they simultaneously call chrome old hat while boasting that they're the same as chrome.
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#288Earlier quoted context omitted.
Every time someone mentions this I have to think about the messed up ecosystem of Safari Webextensions. Safari only allows extensions installed via the apple store, but every single adblocker there is a scam. I'm not kidding you, I audited most of them. Chances are it's either a three years outdated list of adblock plus that doesn't catch anything or it's an extension that replaces all google analytics identifiers wi…
Do you want to call out any particularly malicious ad blockers here? Just in case I happen to have installed one of them.
Since parent tested all of them and they’re not kidding, it follows that yours must be a scam.
Unless they didn’t test everything or were exaggerating that is.
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#289Earlier quoted context omitted.
The scary part is gorhill is able to sell or hand over the extension - as he has done in the past - to someone with looser morals and/or goals. How much do you think NSO Group would pay for this kind of access? If you ran uBlock Origin, would you like to retire early? Jbk from the VLC project has a lot of stories about turning down 6, 7 figure payments to bundle malware in VLC. Not everyone has the strong morals and…
has gorhill really sold an extension to someone in the past?
He sold/handed over 'uBlock'. The new owner was malicious. Gorhill learned from his mistakes, started uBlock origin and decided he'll rather let an extension die than hand it over the next time.
Re: Chrome users beware: Manifest v3 is deceitful and threatening
#290Earlier quoted context omitted.
Or more likely, towards Edge, by virtue of requiring almost no effort to deploy the same set of extensions in a very similar browser in the hands of a company who doesn't require destroying privacy as much as google does to keep making money.
One of the "benefits" to Microsoft of using Chromium is reduced development costs and they're not going to get that if they let the forks diverge too much.
I'm sure Microsoft wouldn't mind spending more on development if it means market share from Google if Chrome breaks everyone's extensions and they still work on Edge