Beehaw
  • Communities
  • Create Post
  • search
    Search
  • Login
  • Sign Up
 narwhal   ( @narwhal@lemmy.ml )  to Technology@lemmy.ml · 2 years ago

Google is already pushing Web Environment Integrity into Chromium

github.com

external-link
message-square
148
link
fedilink
  • cross-posted to:
  • degoogle@lemmy.ml
  • internet@kbin.social
  • privacy@programming.dev
  • privacy@lemmy.ml
  • technology
  • technews@radiation.party
  • hackernews@derp.foo
634
external-link

Google is already pushing Web Environment Integrity into Chromium

github.com

 narwhal   ( @narwhal@lemmy.ml )  to Technology@lemmy.ml · 2 years ago
message-square
148
link
fedilink
  • cross-posted to:
  • degoogle@lemmy.ml
  • internet@kbin.social
  • privacy@programming.dev
  • privacy@lemmy.ml
  • technology
  • technews@radiation.party
  • hackernews@derp.foo
[wei] Ensure Origin Trial enables full feature · chromium/chromium@6f47a22
github.com
external-link
This CL moves the base::Feature from content_features.h to a generated feature from runtime_enabled_features.json5. This means that the base::Feature can be default-enabled while the web API is co...
  •  narwhal   ( @narwhal@lemmy.ml ) OP
    link
    fedilink
    arrow-up
    101
    ·
    2 years ago

    Don’t be evil.

    •  chaorace   ( @chaorace@lemmy.sdf.org ) 
      link
      fedilink
      arrow-up
      19
      ·
      2 years ago

      Be Evil, Do Ads

    •  Fredselfish   ( @Fredselfish@lemmy.ml ) 
      link
      fedilink
      arrow-up
      8
      ·
      2 years ago

      Can you explain this to a layman what this does?

      •  narwhal   ( @narwhal@lemmy.ml ) OP
        link
        fedilink
        arrow-up
        59
        ·
        2 years ago

        It’s DRM, but for the whole web.

        https://arstechnica.com/gadgets/2023/07/googles-web-integrity-api-sounds-like-drm-for-the-web/

      •  RagingNerdoholic   ( @RagingNerdoholic@lemmy.ca ) 
        link
        fedilink
        arrow-up
        53
        ·
        edit-2
        2 years ago

        Web dev here. It enforces the original markup and code from a server to be the markup and code that the browser interprets and executes, preventing any post-loading modifications.

        That sounds a bit dry, but the implications are huge. It means:

        • ad blockers won’t work (the main reason for Google’s ploy)
        • many, if not most, other browser extensions won’t work (eg.: accessibility, theming, anti-malware)
        • people are going to start running into a lot of scam ads that ad blockers would otherwise prevent
        • malicious websites will be able to operate with impunity since you cannot run security extensions to prevent them
        • web developers are going to be crippled for lack of debugging ability

        These are just a few things off the top of my head. There are endless and very dangerous implications to WEI. This is very, very bad for the web and antithesis of how it’s supposed to be.

        TBL is probably experiencing a sudden disturbance in the force.

        •  Peruvian_Skies   ( @Peruvian_Skies@kbin.social ) 
          link
          fedilink
          arrow-up
          6
          ·
          2 years ago

          Wouldn’t it be possible to create some kind of “post-browser” that takes input from the web browser and displays it after passing it through ad blockers and whatever else?

          •  RagingNerdoholic   ( @RagingNerdoholic@lemmy.ca ) 
            link
            fedilink
            arrow-up
            5
            ·
            2 years ago

            Such an abstraction, while unnecessary, should be possible, providing that Google doesn’t forcibly prevent access to the final markup that coalesces (ie.: view source and web dev tools)

            •  CallumWells   ( @CallumWells@lemmy.ml ) 
              link
              fedilink
              English
              arrow-up
              2
              ·
              2 years ago

              The only acceptable browser would obviously be ones that restrict that access, how else are they going to force people to see all their ads?

          •  DogMuffins   ( @DogMuffins@discuss.tchncs.de ) 
            link
            fedilink
            arrow-up
            2
            ·
            2 years ago

            Perhaps, but it’s not as simple as it sounds.

            Most of the Web requires js to work. I don’t think the js will work without the DRM.

            So the proxy would need to be running the js, and emulate your clicks and so on.

      •  DogMuffins   ( @DogMuffins@discuss.tchncs.de ) 
        link
        fedilink
        arrow-up
        34
        ·
        2 years ago

        It’s a way to disable ad blockers.

        Presently web servers send data to your browser, which can arrange the content however you wish, because it’s your browser on your device. Excluding content you don’t like is fairly trivial.

        This drm stuff will basically make the browser refuse to display anything unless the whole page is unaltered.

        •  Zaneak   ( @Zaneak@kbin.social ) 
          link
          fedilink
          arrow-up
          11
          ·
          2 years ago

          Does unaltered include things like colorblind extension that change colors to more easily differentiate between some red/green for example? Or stuff like reddit enhancement suite? Sounds like a good way to kill other possible useful extensions.

          •  RagingNerdoholic   ( @RagingNerdoholic@lemmy.ca ) 
            link
            fedilink
            arrow-up
            5
            ·
            2 years ago

            That’s exactly what it will do. Don’t believe the bullshit in their “non-goals” section, they don’t give a fuck. If accessibility extensions happen to continue working (at least temporarily), it will be by accident, because they for damn sure aren’t going to spend even a second on compatibility.

          •  DogMuffins   ( @DogMuffins@discuss.tchncs.de ) 
            link
            fedilink
            arrow-up
            2
            ·
            2 years ago

            Yes.

    •  rm_dash_r_star   ( @rm_dash_r_star@lemm.ee ) 
      link
      fedilink
      arrow-up
      4
      ·
      2 years ago

      There might have be a time when Google tried not to be evil, but they’ve been Satin himself for a good number of years now. It just took them a while to realize the irony of their mission statement. It’s funny I used to get mad at Microsoft for being evil, but they’ve got nothing on Google.

      •  narwhal   ( @narwhal@lemmy.ml ) OP
        link
        fedilink
        arrow-up
        4
        ·
        2 years ago

        They removed ‘don’t be evil’ from their code of conduct 5 years ago.

        https://time.com/4060575/alphabet-google-dont-be-evil/

Technology@lemmy.ml

technology@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.ml

This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.


Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.


Rules:

1: All Lemmy rules apply

2: Do not post low effort posts

3: NEVER post naziped*gore stuff

4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.

5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)

6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist

7: crypto related posts, unless essential, are disallowed

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 40 users / day
  • 257 users / week
  • 715 users / month
  • 3.2K users / 6 months
  • 1.1K local subscribers
  • 40.6K subscribers
  • 3.58K Posts
  • 23.2K Comments
  • Modlog
  • mods:
  •  MinutePhrase   ( @MinutePhrase@lemmy.ml ) 
  • BE: 0.19.13
  • Modlog
  • Legal
  • Instances
  • Docs
  • Code