←back to thread

552 points freedomben | 4 comments | | HN request time: 0.001s | source
Show context
sho ◴[] No.41809962[source]
Hopefully this is the inflection point for Chrome. Despite all their made-up "security" reasons, everyone knows this is solely about making adblock less effective. For many users, adblock is what makes chrome bearable - and if they make it unbearable, then those users will leave. Slowly but surely.

Google seems much too sure of itself making this change. I hope their arrogance pays off just the same as Microsoft's did with IE.

replies(14): >>41810044 #>>41810118 #>>41810304 #>>41810320 #>>41810359 #>>41810375 #>>41810472 #>>41810519 #>>41810553 #>>41811938 #>>41812626 #>>41813079 #>>41813685 #>>41822203 #
crazygringo ◴[] No.41810304[source]
> everyone knows this is solely about making adblock less effective

I thought I knew that.

Then I switched from uBlock Origin to uBlock Origin Lite in Chrome, which is compatible with Manifest v3. I was prepared for the horrible onslaught of ads, expecting at least a quarter would start getting through, ready to switch to Firefox...

...and didn't notice a single change. Not a single ad gets through.

And at the same time, loading pages feels a little faster, though I haven't measured it.

Which has now got me wondering -- what if Manifest v3 really was about security and performance all along?

Because if Google was using it to kill adblockers, they've made approximately 0% progress towards that goal as far as I can tell. If they really wanted to kill adblockers, they'd just, you know, kill adblockers. But they didn't at all.

replies(8): >>41810353 #>>41810378 #>>41810393 #>>41810478 #>>41810535 #>>41810636 #>>41812396 #>>41818090 #
eikenberry ◴[] No.41810636[source]
If I remember right then the difference is more about ad-tracking/privacy than blocking. V2 allowed UBO to find and intercept the calls to the ad servers before the calls were made. Where V3+UBL still makes the calls it just doesn't display the results. So while you might not see the ads, the ads see you.
replies(2): >>41811022 #>>41815045 #
kuhsaft ◴[] No.41811022[source]
On the contrary, MV2 used onBeforeRequest which let extensions see what requests you were making. They could then take that data and use it for malicious purposes.

MV3 doesn’t allow extensions to know what requests are being made, so extensions can’t use your data maliciously.

Requests to ads that are blocked are blocked.

I think you’re thinking of Privacy-preserving ad measurement which is an option in Firefox and Safari. https://support.mozilla.org/en-US/kb/privacy-preserving-attr...

replies(3): >>41811870 #>>41812305 #>>41813398 #
sunshowers ◴[] No.41812305[source]
Doesn't onBeforeRequest still exist in Manifest v3? The thing that's been removed is the ability to block on it, not the ability to register handlers for requests.
replies(1): >>41812416 #
1. kuhsaft ◴[] No.41812416[source]
It still exists, but now “ad blockers” can’t use the blocking API to record and forward metrics on hits. Ad blockers don’t even need the webRequest and webRequestBlocking permissions anymore.

Now, if an ad blocker has webRequest permissions it’s a red flag.

For example https://developer.chrome.com/docs/extensions/develop/concept... uses webRequest to send telemetry back to some remote server.

replies(1): >>41812566 #
2. sunshowers ◴[] No.41812566[source]
Thanks, I see how that can help.

With Manifest v3, let's say I'm an ad blocker and I want to get access to metrics not to violate privacy, but just to report them to the user (X domains blocked, Y out of Z requests blocked, etc). How would I get access to those metrics?

replies(1): >>41812734 #
3. kuhsaft ◴[] No.41812734[source]
Separate permission for debugging only available for development essentially. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

Otherwise, you can’t really without more invasive permissions.

https://stackoverflow.com/questions/74813523/chrome-extensio...

replies(1): >>41812872 #
4. sunshowers ◴[] No.41812872{3}[source]
Oh wow, that's wild. Closing the loop on reporting things is such an important part of a trustworthy user experience.