←back to thread

LibRedirect – Redirects popular sites to alternative privacy-friendly frontends

(libredirect.github.io)
424 points riffraff | 1 comments | 22 Jun 25 06:07 UTC | HN request time: 0s | source
Show context
bmacho ◴[22 Jun 25 09:08 UTC] No.44345300[source]▶
A web extension is an unnecessary security risk. A userscript will do it just fine.

edit: one of my previous attempt: https://news.ycombinator.com/item?id=35229211

I actually have made it extensible, with closely coupled source of rules and domains; but then I lost it Edge forgot all my userscripts :(

replies(6): >>44345337 #>>44345619 #>>44345836 #>>44346890 #>>44348908 #>>44349239 #
londons_explore ◴[22 Jun 25 09:14 UTC] No.44345337[source]▶
User scripts have super wide permissions. For example a user script scoped to YouTube.com can make payments from any cards you have saved in Google pay.

And most user scripts are so long a typical user won't be able to spot a couple of malicious lines amongst 10k lines of minified webpacked libraries.

replies(2): >>44345369 #>>44345394 #
bmacho ◴[22 Jun 25 09:21 UTC] No.44345369[source]▶
> And most user scripts are so long a typical user won't be able to spot a couple of malicious lines amongst 10k lines of minified webpacked libraries.

Exactly!

That's why you should use 3 lines for it instead, that are

   - inspectable
   - not updateable by the Chinese/Russians
   - written by you anyway
replies(1): >>44346404 #
danielspace23[dead post] ◴[22 Jun 25 12:36 UTC] No.44346404{3}[source]▶
[flagged]
1. bmacho ◴[22 Jun 25 13:45 UTC] No.44346925{4}[source]▶
I've chosen them as example elements of the larger group: people that would harm you. It's a type of synecdoche[0,1].

I was considering reformulating it, in $CURRENTYEAR there is always someone that claims that using Russian or Chinese as a synonym for 'enemy' is Russo- and Shinophobic. I've decided against it this time.

[0] : https://en.wikipedia.org/wiki/Synecdoche#Part_referring_to_w...

[1] : https://en.wikipedia.org/wiki/Pars_pro_toto