Live data from Hacker News

Chrome users beware: Manifest v3 is deceitful and threatening

eff.org

81–90 of 396 posts

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#81
I honestly think that Google underestimated how much they are going to piss off users with MV3. There are thousands of extensions that will stop working and be impossible to build. But also there will be a lot of broken experiences as remote loading is forbidden and fixes will need a new release.

Can't wait, but that's a very good opportunity for Firefox as Firefox will become more powerful than Chrome

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#82
post #81

I honestly think that Google underestimated how much they are going to piss off users with MV3. There are thousands of extensions that will stop working and be impossible to build. But also there will be a lot of broken experiences as remote loading is forbidden and fixes will need a new release. Can't wait, but that's a very good opportunity for Firefox as Firefox will become more powerful than Chrome

Or more likely, towards Edge, by virtue of requiring almost no effort to deploy the same set of extensions in a very similar browser in the hands of a company who doesn't require destroying privacy as much as google does to keep making money.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#83

So I guess someone will have to come up with a turn-key pihole-alike?

Doesn’t https and subsequently DNS over HTTPS effectively negate pi-hole? Honest inexperienced question.

Yes. Next you'll have to MiTM the DNS over HTTPS. Next in the arms race comes certificate-pinning. Controlling your name resolution will probably remain possible on Linux, but I expect most other platforms will make it exceedingly difficult for "normal" users.

Embedded devices are already "game over". You don't own them (even if you paid for them).

Controlling name resolution on your own network (and MiTM'ing HTTPS) makes you the same as a hostile nation-state actor. We can't have that.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#84

Earlier quoted context omitted.

Make them first class Firefox extensions.

I mean you can, but firefox doesn't treat you any better. We waited 2+ months to get a minor update through review, and getting it through that quickly took emailing several folks (including one from HN). During that whole process they also removed the display of your queue position, making it even more opaque. At some point they disliked something in our extension that had been live for months, and disabled every re…

At this point I am seriously wondering if Mozilla is paid to drive Firefox into the ground.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#85

So I guess someone will have to come up with a turn-key pihole-alike?

Doesn’t https and subsequently DNS over HTTPS effectively negate pi-hole? Honest inexperienced question.

HTTPS no, because you're still making regular old DNS queries for every domain, but DNS over HTTPS or stuff like Chromecasts using hardcoded DNS servers do effectively negate Pi-Hole.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#87
post #82
post #81

I honestly think that Google underestimated how much they are going to piss off users with MV3. There are thousands of extensions that will stop working and be impossible to build. But also there will be a lot of broken experiences as remote loading is forbidden and fixes will need a new release. Can't wait, but that's a very good opportunity for Firefox as Firefox will become more powerful than Chrome

Or more likely, towards Edge, by virtue of requiring almost no effort to deploy the same set of extensions in a very similar browser in the hands of a company who doesn't require destroying privacy as much as google does to keep making money.

IIRC, the Edge team said they would adopt manifest v3, but correct me if I'm wrong.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#88
post #2

Wow, I kind of thought the headline would be an overstatement, but the article actually seems pretty even-handed and truthful in describing what's happening with Google's power over the browser market.

I, on the other hand, found the article to be terrible. Consider the following quote: > Manifest V3, or Mv3 for short, is outright harmful to privacy efforts. It will restrict the capabilities of web extensions—especially those that are designed to monitor, modify, and compute alongside the conversation your browser has with the websites you visit. Under the new specifications, extensions like these– like some privac…

Follow the links in the first paragraph of the article, they go into details about the technical aspects of why Manifest V3 is harmful to users.

It's disappointing to see this sentiment again, as this has been Google's tactic in the past decade: feign innocence and initiate technical discussions, then move goalposts and start over until their opponents are exhausted.

When we first heard of Manifest V3, it took them months to find a ridiculous reason for no longer allowing proper control over requests in Chrome, and they kept jumping between performance, privacy and security, as researchers refuted all their technical arguments one by one.

By now there is nothing left to discuss, they'd just need to stop being malicious.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#89
post #23

Earlier quoted context omitted.

I believe they would gain users from Chrome, where you won't be able to block ads anymore.

I would certainly stop using Chrome

Just do it today :-)

I often have a month or more long streak between every time I have to use Ch#%!e ;-)

Bonus point for devs: If it works in Firefox it usually works everywhere since Firefox had always been reasonably standard compliant.

Re: Chrome users beware: Manifest v3 is deceitful and threatening

#90
post #87
post #82

Earlier quoted context omitted.

Or more likely, towards Edge, by virtue of requiring almost no effort to deploy the same set of extensions in a very similar browser in the hands of a company who doesn't require destroying privacy as much as google does to keep making money.

IIRC, the Edge team said they would adopt manifest v3, but correct me if I'm wrong.

[deleted]
Post reply on HN