1. Posts must be related to the discussion of digital piracy
2. Don't request invites, trade, sell, or self-promote
3. Don't request or link to specific pirated titles, including DMs
4. Don't submit low-quality posts, be entitled, or harass others
📜 c/Piracy Wiki (Community Edition):
💰 Please help cover server costs.
 |
 |
|---|---|
| Ko-fi | Liberapay |
looks like rendering adblockers extensions obsolete with manifest-v3 was not enough so now they try to implement DRM into the browser giving the ability to any website to refuse traffic to you if you don't run a complaint browser ( cough...firefox )
here is an article in hacker news since i'm sure they can explain this to you better than i.
and also some github docs
Ad Blocking is cyber security
Malvertising (a portmanteau of "malicious software (malware) advertising") is the use of online advertising to spread malware.
It typically involves injecting malicious or malware-laden advertisements into legitimate online advertising networks and webpages.
Because advertising content can be inserted into high-profile and reputable websites, malvertising provides malefactors an opportunity to push their attacks to web users who might not otherwise see the ads, due to firewalls, more safety precautions, or the like.
Malvertising is "attractive to attackers because they 'can be easily spread across a large number of legitimate websites without directly compromising those websites'."
We need more browser options, not just Firefox and 20 versions of chrome.
If you have the funds, donate to Mozilla. They're not only the main developers of the only major competing browser engine, but also do a lot of other good work. You can hope for others, but with Firefox only having single-digit usage share it needs all the help it can get.
I completely agree, but don’t forget that WebKit exists too on Mac and Linux with about the same market share as Firefox (at least based on w3school’s stats). Chrome/Blink dominate but all hope is not lost and there are more options, they’re just small. I think focusing on embracing Firefox/Gecko as it has so much momentum and community already is the most productive way forward though
To be fair, there are about 20 versions of Firefox too. It’s just that most of them aren’t there to Hoover up ad revenue.
-->since everyone is confused about this i'm gonna try to explain as best as i could and also clearing some misconceptions:
1# why this is such a big deal ?
if this gets implemented AND it gets widely adopted websites now can refuse to give you content if you are running a non complied browser, remember those website that say "oh you are using an ad blocker so disable it to access our site" they can detect this by various methods but ultimately all of them rely on running a JavaScript into your browser. which you guessed it, its easy to modify and tamper with manually or using extensions
now what WEI-API does is that it can verify the integrity of the web page ( JavaScript/HTML/CSS has not been modified ) and even tell the website what extensions - ad blocker detected no content for you - you are using and what browser you are using - firefox or brave detected no content for you - and do not be fooled into thinking that this can be spoofed. and website owners who think that they are running a business not a charity will implement this.
2#will using firefox save me?
if this gets widely adopted and you inevitably encounter a website that require this ( for your job ,school or your bank ) you have no choice but to use chrome just like when your banking apps refuse to work because your phone is rooted which means that SAFETY-NET is broken
3#why this is a threat to begin with?
this is only viable if the web adopt it so why bother?, well guess what google is famous for making its services very easy to integrate and well documented just look on how easy it is to integrate google analytics and google adsense* into websites and how many of them use it in the internet.
4#what can we do to prevent this?
this is my personal opinion but i think we simply can't, this not like the reddit incident were very large portion of the user base was upset most people don't know/care/give-a-fuck about web technologies and how they work.
#and Finally "but google said they don't plan to use this to fingerprint you (Device ID) or track your browser history or interfere with the work of extensions"
do you really believe that a company like google whose bread and butter is advertising would not make it easier for themselves, a company who has been exposed time and time again for lying and having ulterior motives ( you don't need to look far just look into what manifest-v3 did )
I will happily stop visiting any website that demands I use an approved browser.
Well, those of us who care all say that but I for one have to access government and banking websites in several countries, if they implement this I have no choice. This abomination must be prevented in the first place.
Stop using Google products I don’t know how else to fucking say it.
Chrome -> Firefox Drive -> sync or Dropbox or any number of options Sheets and productivity tools > libre office or Apache open office YouTube -> Invidious or even better, odysse Google search -> duck duck go, SearXNG, StartPage, etc Gmail -> not a ton of great options. I’d probably recommend proton mail but the FOSS email world is definitely lacking, or gets blocked or goes down, harder to self host etc.
helped with formatting:
Chrome -> Firefox
Drive -> sync or Dropbox or any number of options
Sheets and productivity tools > libre office or Apache open office
YouTube -> Invidious or even better, odysse
Google search -> duck duck go, SearXNG, StartPage, etc
Gmail -> not a ton of great options. I’d probably recommend proton mail but the FOSS email world is definitely lacking, or gets blocked or goes down, harder to self host etc.
And I agree for sure. In order I use firefox (and brave sometimes), Proton Drive, Apple Productivity suite (pages, numbers etc), and either startpage or qwant, and proton mail. I do still use use YouTube Premium, but the point is Google doesn't need to have its fingers in every aspect of my digital life.
This is exactly why everyone should use fully idenpendted browser like Firefox
This is exactly why everyone should donate to Mozilla so they can stop being reliant on the Google search deal in Firefox.
Users like visiting websites that are expensive to create and maintain, but they often want or need to do it without paying directly. These websites fund themselves with ads, but the advertisers can only afford to pay for humans to see the ads, rather than robots.
Won't you think of the poor poor ad companies?
Users like visiting websites that are expensive to create and maintain
Do they actually, or is that just all they have to visit anymore? Would users not be happier visiting a bunch of cheap geocities pages with blink tags instead of tracking cookies?
I see so many comments from people saying they'll jump ship if Google adds this to Chrome. They'll move over to Firefox right away. But the thing most people don't know is one reason Google has such a broad reach is they make it so crazy easy to integrate their services for developers.
So, yes, users who dislike what they're doing should stop using Google products if possible. But, more importantly, developers or project managers, etc. should all resist the urge to utilize this kind of feature even if it's easy.
"Do no evil." ...unless it's projected as profitable, in which case, evil that shit up!
They ditched the "don't be evil" years ago. Now it's "As many ads as possible".
I hear that they can cover up to 80% of a user's visual field without inducing seizures.
Yet another vitally important front in the war on general purpose computing (it's a short and important read imo)
Fuck Google, and fuck DRM.
I work at a vpn/adblocker company and we just finished releasing an updated mv3 extension that does block ads effectively (among other things) but the feature set is limited vs mv2 because of the changes. Furthermore, google has actually pushed back their mandated release schedule for mv3 compliance because something less than 30% of the extensions on their store are anywhere close to ready for it (which if they pushed ahead with mv3 they would effectively break 70% of what's on there overnight).
The DRM shit is just next-level bad though. Enshitification 101.
Guess why I don't use the Chrome ecosystem and don't depend on Google.
This is scary
Remember kids, piracy and shoplifting are your friends. Reason I say shoplifting is this will be used to block you from paying for stuff online, just look at how google pay is blocked on non google approved spyware Roms
They want to go back to the days of websites requiring internet explorer... just this time with their browser. Even though getting away from that culture is most of the reason people ever switched to chrome. I will say though, just using firefox for everything you can isn't enough of a protest. If this goes the way Google (Alphabet I guess) wants it to, you bank will require you to use a browser with DRM. You will be forced to use a browser whose source code you can't verify as secure, to access your bank. And that is where the protest lines need to be drawn. If your bank does that? Send your message. Close the account. Take back your money. Now I'd personally do this for everything possible, but that would be a looooot of time spent getting very little across to companies that don't care if you visit their site. Taking money from banks though? Yeah it might be a whole process where you gotta request it, verify in person, wait a week to get the cash, and THEN close it, but so what? A couple hours of doing stuff and then a week of business as usual before a couple more hours opening a new bank account. That's more than worth doing to send a REAL message.
They want everything to run in TEE on the TPM, which has device specific keys signed by the manufacturer and can't be accessed through normal means
Best case scenario is someone learns to spoof it, but that's not easy. Possible, but unlikely to be packaged for personal use, since it'd be the kind of exploit you could sell to the right group for a 6 or 7 figure payout - and that's doing it officially and above board. Plus, if you did share it, you'd want to keep your identity hidden, the manufacturer would probably try to silence you with legal action
Hopefully, the EU challenges them if they try to move forward, someone brought up a law on the books in Germany that makes it illegal to use an automated system to make the decision to deny someone access to a system
Fuck google and anything they have to offer.
Dude if they make youtube accessible only through Chrome we gonna have some problems.
Ever since I switched to Firefox, I have not looked back and I am glad I did it.
I have long felt that the computer industry course-corrected with mobile phones. They made a mistake in the early years of computers by letting users do things like install software from unauthorized sources, modify software to run to their liking, or even strip out the operating system and replace it with an alternative. Now we get things like TPM, Pluton, chains of trust, and DRM. 2% (rounding up) to protect users from malicious software tampering, 99% (rounding down) to extract rents from users and to track them for advertising or other purposes.
This code will only ever be installed on my machines by force against my will.
No benefit to any users at all, all benefit only to Google and their Advertisers.
Lol welp, guess who just switched to Firefox
BIG INTERNET is coming to get us
Remember when browsers just browsed....