Unpacking Google’s Web Environment Integrity specification

"This website is not compatible with your device"

I can see this show up on Youtube (why not - under Google's control, and they want you to watch the ads on their official browser) and on banking apps. Initially. In the longer run, it either withers and dies, or it leads to antitrust action. I really can't see another way.

This will probably be implemented by every streaming service very quickly to try to prevent piracy (which won't work), and will only end up harming people who just want to watch on more freedom-respecting browsers or operating systems

g**gle and other PRISM partners do not want any users on freedom-respecting browsers/OSes. forcing people onto chromium based browsers isn't an unfortunate side effect, it's a secondary goal of the specification.

Banks are not the target of this. If Banks do something that inhibits people with disabilities, corporate account managers with disabilities, or senior citizens, they will get skewered. They will tread carefully.

Actually, absent a full chain-of-trust from boot, which I believe Android/iOS do provide, and possibly the proprietary desktop environments can provide, it should be possible to fake the "I'm a legitimate browser" exchange. Which is what the 1% that care will do. But it sucks to have to go to deep underground "crack" type stuff where before there was an open web. Not to mention the risk of getting hit by the banhammer if detected.

It's already not possible to login to Twitch on Linux.

It rejects Firefox and Chrome outright. The solution is to use either browser on Wine, then copy the session cookies over.

I think you're wrong because I stream on Twitch using Linux.

> Not to mention the risk of getting hit by the banhammer if detected

Or probably CFAA, it seems inevitable to me that these organizations will use state violence to enforce their monopolies.

FWIW streamlink [0] and streamlink twitch GUI [1] are FOSS solutions for watching twitch on GNU/Linux:

  streamlink "https://twitch.tv/$streamer" best --twitch-disable-ads --player mpv

No ads, no tracking, no purple screens, no psuedo social network stuff to hijack your dopamine systems.

[0] https://github.com/streamlink/streamlink

[1] https://streamlink.github.io/streamlink-twitch-gui/

When did you last login to the website? Sessions last months, if not years.

I recommend not logging out, as you'd then be affected by this.

I am aware and love it.

Works great, until you need to chat or to manage your own channel.

I was surprised and skeptical, but he seems to be right.

I've opened a brand new Firefox instance and got "Your browser is not currently supported. Please use a recommended browser or learn more here." (linking to https://help.twitch.tv/s/article/supported-browsers?language...) on the login screen.

The login made a zero-payload POST to https://passport.twitch.tv/integrity and it responded with 400 and a JSON body {"error_code": 5025, "error_description": "integrity failed", "error": "Oops! We encountered an unexpected error. Please try again.", ...}.

It seems that this is not about GNU/Linux, though, as it happens at random (searches for `twitch "integrity failed"` produce results from all sort of platforms and browsers). Must be that some pointy haired boss had some important ideas about security.

I was able to log in from a Firefox on a different GNU/Linux system, so it's not like those are always blocked. I suspect there's some User-Agent whitelist or similar kind of nonsense (but looking at the console logs and bunch of WebGL errors it certainly tries to fingerprint the system), but I'm too lazy to investigate this any further.

This seems pointless to me. These platforms already use Widevine and similar services for this purpose.

> absent a full chain-of-trust from boot, which I believe Android/iOS do provide, and possibly the proprietary desktop environments can provide

Exactly, absent all platforms except OSS operating systems like Linux.

Windows 11, with its required hardware TPM, can absolutely do this. So can modern macOS.

"Defense in Depth" they will say

Works just fine for me. Firefox LTS on Gentoo, with adblock and bttv extensions.

This is not true. I just logged into Twitch on Linux, Firefox ESR and it works just fine.

I just logged in less than a minute ago, using Firefox on Linux. No issues whatsoever.

No, whatever issue you are experiencing is not simply Twitch blocking Linux. I can login fine from Linux from chromium and firefox.

Interesting. Got an up to date arch where neither chromium nor firefox work, not even with clean profiles.

Last I tried was over a month ago... I will give it another go soon. I do not expect progress.

I'm not certain what you mean by "managing your own channel" in particular, but I use Chatterino[0] and find it to be a solid pairing with streamlink + VLC as far as just chat goes. It's also pretty straightforward to build from source which is always nice to me at least.

[0](https://chatterino.com/)

I just logged into Twitch with a fresh session in Firefox on a Linux system as well. No problems.

Logged in right now just fine. Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0