←back to thread

424 points riffraff | 1 comments | | HN request time: 0s | source
Show context
bmacho ◴[] No.44345300[source]
A web extension is an unnecessary security risk. A userscript will do it just fine.

edit: one of my previous attempt: https://news.ycombinator.com/item?id=35229211

I actually have made it extensible, with closely coupled source of rules and domains; but then I lost it Edge forgot all my userscripts :(

replies(6): >>44345337 #>>44345619 #>>44345836 #>>44346890 #>>44348908 #>>44349239 #
londons_explore ◴[] No.44345337[source]
User scripts have super wide permissions. For example a user script scoped to YouTube.com can make payments from any cards you have saved in Google pay.

And most user scripts are so long a typical user won't be able to spot a couple of malicious lines amongst 10k lines of minified webpacked libraries.

replies(2): >>44345369 #>>44345394 #
rvnx ◴[] No.44345394[source]
You also have to weight the benefits versus the "risk".

For example, if you use FreeTube with SponsorBlock to improve your privacy and block ads, in fact you are sending to Cloudflare 100% of your YouTube watch history, and to SponsorBlock ("sponsor.ajay.io").

With Piped instances it's even worse, essentially escaping Google's tracking just to give our data to random strangers.

If you are worried, just run a second Chrome session with NordVPN and uBlock Origin in a loose jurisdiction and browse YouTube unlogged.

It's easy, simple, and you have the benefits of an audited platform and that reasonably legally confirm they don't store logs unless the court forced them: "we never log their activity unless ordered by a court never log their activity unless ordered by a court", but for that, the court has to find you as a user, which can be very complicated in practice.

So much better than random strangers.

replies(6): >>44345469 #>>44345751 #>>44346149 #>>44346190 #>>44346234 #>>44347476 #
1. HK-NC ◴[] No.44345751{3}[source]
I'm happy to give my watch history to some unknown in exchange for never ever seeing an ad.