Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Chrome users beware: Manifest v3 is deceitful and threatening

eff.org

Post reply on HN
Print view View original

291–300 of 396 posts

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#291

Post by mariusor »

tptacek wrote: post #258

It's hard to take EFF seriously when they write so hyperbolically. What's clearly also the case is that Chrome extensions are one of the great modern security and privacy challenges --- to the point where multiple tech company security teams have people whose job it is just to screen them. Another detail that EFF doesn't want to share is that ad blockers are some of the worst offenders --- they demand maximal access…

> But EFF doesn't trust you to make that decision on your own.

But neither does google on the other hand, and they're the ones that can actually do something more about it than writing a blog post.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#292

Post by veeti »

tptacek wrote: post #258

It's hard to take EFF seriously when they write so hyperbolically. What's clearly also the case is that Chrome extensions are one of the great modern security and privacy challenges --- to the point where multiple tech company security teams have people whose job it is just to screen them. Another detail that EFF doesn't want to share is that ad blockers are some of the worst offenders --- they demand maximal access…

There is no decision left to make once this change goes through. You can talk about improved security all you want, but the fact remains that uBlock Origin will be permanently crippled. This by far negates any security or privacy gain that Manifest v3 could possibly make.

Switch to Firefox.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#293

Post by afiori »

josephcsible wrote: post #274
Bellamy wrote: post #273

Opera, Brave, Firefox, even DuckDuckGo browser works pretty well. There is really no need to use Chrome anymore.

What's even the point of switching away from Chrome if the browser you're switching to is also Chromium-based and closed source?

limiting Google tracking

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#294

Post by Hackbraten »

polote wrote: post #81

I honestly think that Google underestimated how much they are going to piss off users with MV3. There are thousands of extensions that will stop working and be impossible to build. But also there will be a lot of broken experiences as remote loading is forbidden and fixes will need a new release. Can't wait, but that's a very good opportunity for Firefox as Firefox will become more powerful than Chrome

Chances are that alienating the power users won’t even make a dent in Chrome’s marketshare.

I’d suspect a majority of users isn’t even aware that browser extensions are a thing.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#295

Post by cookiengineer »

blub wrote: post #288
less_less wrote: post #284

Earlier quoted context omitted.

Do you want to call out any particularly malicious ad blockers here? Just in case I happen to have installed one of them.

Since parent tested all of them and they’re not kidding, it follows that yours must be a scam. Unless they didn’t test everything or were exaggerating that is.

Since you made up your mind, you must be one of those scamware devs.

Unless you were exaggerating and actually don't use MacOS or Safari anyways.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#296

Post by ddalex »

asddubs wrote: post #267
Eelongate wrote: post #247

Earlier quoted context omitted.

Does Brave have their own extension repository yet, or are they still leaving that all up to Google? I don't see much value in Brave supporting a feature dropped from Chrome if it only has Chrome extensions and they all drop support for it anyway.

this kind of thing is why we need firefox, not chromium fork X.

firefox said that they will move to V3 as an effort to maximize browser compatibility

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#297

Post by cookiengineer »

DavideNL wrote: post #280
cookiengineer wrote: post #277

Earlier quoted context omitted.

Every time someone mentions this I have to think about the messed up ecosystem of Safari Webextensions. Safari only allows extensions installed via the apple store, but every single adblocker there is a scam. I'm not kidding you, I audited most of them. Chances are it's either a three years outdated list of adblock plus that doesn't catch anything or it's an extension that replaces all google analytics identifiers wi…

So "Adguard for Safari" is a scam, for example ?

You picked literally the only choice left that's not a scam.

I updated my previous comment with more details, hence the comment was written on mobile initially.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#298

Post by Hackbraten »

Cpoll wrote: post #260

Semi-related question: Does anyone have a workflow for version pinning Chrome extensions? GSuite Admin lets you allowlist extensions, but I haven't seen a way to fix an extension to a trusted version.

In both Chrome and Firefox for Linux, you can create and maintain a package for your system-wide package manager that wraps your extension at whatever version you like.

Example: https://aur.archlinux.org/cgit/aur.git/tree/PKGBUILD?h=chrom...

Not sure about other OSes, though.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#300

Post by youngtaff »

kbelder wrote: post #272
mappu wrote: post #252

Earlier quoted context omitted.

This is almost exactly what Manifest V3 is - it reduces the extension to just be a list manager for a built-in blocker. The only real complaint is that Chrome did not anticipate how large these lists need to be in 2021, and the limits are too low.

Another problem is that it's static; my understanding is the extension creator needs to make a new list, get it approved by Google, put it in the repository, and get the user to download the update, before a new ad is blocked. Probably requires a restart of the browser, also. Not sure if it removes the ability for the user to on-the-fly add any blocking, but I suspect it does.

New rules can be added at runtime - https://developer.chrome.com/docs/extensions/reference/decla...
Post reply on HN