Ad Blocking is cyber security

We need more browser options, not just Firefox and 20 versions of chrome.

Google Chrome (v42.12.0183, MULTi5) [FitGirl Repack]

-->since everyone is confused about this i'm gonna try to explain as best as i could and also clearing some misconceptions:

1# why this is such a big deal ?

if this gets implemented AND it gets widely adopted websites now can refuse to give you content if you are running a non complied browser, remember those website that say "oh you are using an ad blocker so disable it to access our site" they can detect this by various methods but ultimately all of them rely on running a JavaScript into your browser. which you guessed it, its easy to modify and tamper with manually or using extensions

now what WEI-API does is that it can verify the integrity of the web page ( JavaScript/HTML/CSS has not been modified ) and even tell the website what extensions - ad blocker detected no content for you - you are using and what browser you are using - firefox or brave detected no content for you - and do not be fooled into thinking that this can be spoofed. and website owners who think that they are running a business not a charity will implement this.

2#will using firefox save me?

if this gets widely adopted and you inevitably encounter a website that require this ( for your job ,school or your bank ) you have no choice but to use chrome just like when your banking apps refuse to work because your phone is rooted which means that SAFETY-NET is broken

3#why this is a threat to begin with?

this is only viable if the web adopt it so why bother?, well guess what google is famous for making its services very easy to integrate and well documented just look on how easy it is to integrate google analytics and google adsense* into websites and how many of them use it in the internet.

4#what can we do to prevent this?

this is my personal opinion but i think we simply can't, this not like the reddit incident were very large portion of the user base was upset most people don't know/care/give-a-fuck about web technologies and how they work.

#and Finally "but google said they don't plan to use this to fingerprint you (Device ID) or track your browser history or interfere with the work of extensions"

do you really believe that a company like google whose bread and butter is advertising would not make it easier for themselves, a company who has been exposed time and time again for lying and having ulterior motives ( you don't need to look far just look into what manifest-v3 did )

I will happily stop visiting any website that demands I use an approved browser.

Stop using Google products I don’t know how else to fucking say it.

Chrome -> Firefox Drive -> sync or Dropbox or any number of options Sheets and productivity tools > libre office or Apache open office YouTube -> Invidious or even better, odysse Google search -> duck duck go, SearXNG, StartPage, etc Gmail -> not a ton of great options. I’d probably recommend proton mail but the FOSS email world is definitely lacking, or gets blocked or goes down, harder to self host etc.

How is the worlds biggest ad distributor also the worlds biggest browser maker without it being an anti-trust violation?

Remember when browsers just browsed....

This is exactly why everyone should use fully idenpendted browser like Firefox

"Do no evil." ...unless it's projected as profitable, in which case, evil that shit up!

I see so many comments from people saying they'll jump ship if Google adds this to Chrome. They'll move over to Firefox right away. But the thing most people don't know is one reason Google has such a broad reach is they make it so crazy easy to integrate their services for developers.

So, yes, users who dislike what they're doing should stop using Google products if possible. But, more importantly, developers or project managers, etc. should all resist the urge to utilize this kind of feature even if it's easy.

Users like visiting websites that are expensive to create and maintain, but they often want or need to do it without paying directly. These websites fund themselves with ads, but the advertisers can only afford to pay for humans to see the ads, rather than robots.

Won't you think of the poor poor ad companies?

Time for me to start donating to Firefox. Need to do my part to make sure Chrome doesn’t complete its monopoly

Yet another vitally important front in the war on general purpose computing (it's a short and important read imo)

Fuck Google, and fuck DRM.

I quit the internet before I quit Firefox.

I work at a vpn/adblocker company and we just finished releasing an updated mv3 extension that does block ads effectively (among other things) but the feature set is limited vs mv2 because of the changes. Furthermore, google has actually pushed back their mandated release schedule for mv3 compliance because something less than 30% of the extensions on their store are anywhere close to ready for it (which if they pushed ahead with mv3 they would effectively break 70% of what's on there overnight).

The DRM shit is just next-level bad though. Enshitification 101.

Guess why I don't use the Chrome ecosystem and don't depend on Google.

www.getfirefox.com

Louis Rossman made a video about this and especially where he quotes users from HackerNews hammers the point home for me. Firefox will be forced to adopt this "feature" if it ever becomes reality, as Chrome has overwhelming market share and the average user only cares that the site loads.

They want to go back to the days of websites requiring internet explorer... just this time with their browser. Even though getting away from that culture is most of the reason people ever switched to chrome. I will say though, just using firefox for everything you can isn't enough of a protest. If this goes the way Google (Alphabet I guess) wants it to, you bank will require you to use a browser with DRM. You will be forced to use a browser whose source code you can't verify as secure, to access your bank. And that is where the protest lines need to be drawn. If your bank does that? Send your message. Close the account. Take back your money. Now I'd personally do this for everything possible, but that would be a looooot of time spent getting very little across to companies that don't care if you visit their site. Taking money from banks though? Yeah it might be a whole process where you gotta request it, verify in person, wait a week to get the cash, and THEN close it, but so what? A couple hours of doing stuff and then a week of business as usual before a couple more hours opening a new bank account. That's more than worth doing to send a REAL message.

That's why I'm not using chromium based browser.

This is scary

Remember when the web looked like this?

Fuck google and anything they have to offer.

They want everything to run in TEE on the TPM, which has device specific keys signed by the manufacturer and can't be accessed through normal means

Best case scenario is someone learns to spoof it, but that's not easy. Possible, but unlikely to be packaged for personal use, since it'd be the kind of exploit you could sell to the right group for a 6 or 7 figure payout - and that's doing it officially and above board. Plus, if you did share it, you'd want to keep your identity hidden, the manufacturer would probably try to silence you with legal action

Hopefully, the EU challenges them if they try to move forward, someone brought up a law on the books in Germany that makes it illegal to use an automated system to make the decision to deny someone access to a system