10 ms·
I don't "bypass" Chrome when they want to melt my brain with their business model, I use Firefox. I don't "bypass" Windows when they want to melt my brain with
by zulban 1y ago
I don't "bypass" Chrome when they want to melt my brain with their business model, I use Firefox. I don't "bypass" Windows when they want to melt my brain with their business model, I use Linux. No idea why so many "hackers" doing "bypasses" can't instead take action that is simpler, long lasting, and easier. Do people need to jerked around 50 times for 20 years before realizing it will keep happening and their "bypasses" are just temporary bandaids?
- JohnFen 1y agoIt's more about the challenge of it than practicality.
- arcfour 1y agoYou should read the article before commenting; your comment is a non-sequitur.
- doctorpangloss 1y agoI don’t know. Eventually you read enough of this stuff and you would rather the next breath be, take leadership on a real solution. To me it’s a “sequitur” to say, the biggest fuck you is to convince people to stop using Chrome, not to fix bugs for their extremely highly paid engineers for free.
- spenczar5 1y agoUh sir the article is about JavaScript Browser APIS
- doctorpangloss 1y agoevery day, people are writing about javascript browser apis, why do you think we're reading about this one?
- zulban 1y agoRight back at you. If you think my comment is a non-sequitur, maybe you didn't read the article?
- deleted 1y ago[deleted]
- bravesoul2 1y agoIt's a oui-sequitur for sure.
- pharrington 1y agoBillions of non-programmers, who have no idea what an extension manifest even is, use Chrome.
- mrcsharp 1y ago> No idea why so many "hackers" doing "bypasses" .... Because that's what it means to be a hacker. Yes, installing Firefox is simpler (and I'm a Firefox user) but I respect the effort to overcome Google's measures in disallowing certain addons.
- whatshisface 1y ago>But I don't know how to make an adblocker, so I decided to report the issue to Google in August 2023. It was patched in Chrome 118 by checking whether extensions using opt_webViewInstanceId actually had WebView permissions. For the report, I netted a massive reward of $0. They decided it wasn't a security issue, and honestly, I agree, because it didn't give extensions access to data they didn't already have. The effort to overcome the community's chance at discovering the workaround?
- chmod775 1y agoIt was never going to last long enough anyways, being sure to get patched as soon as any adblocker uses it. It's however still interesting in the sense that it might be fairly trivial to change, so chances are the next adblockers are going to ship executable that wrap chrome, modifying something like that at launch, allowing their extension to make use of it. Obviously Google is going to hate it when random popular extensions start nagging users to download and install "companion" software in order to work, since that will train users to not think twice about these things and bypasses legitimate security efforts. But Google made their own bed - and that of their users. Now they all get to lie in it together.
- wongarsu 1y agoOnce the legitimate adblock extensions have made the tech news cycle by switching to an executable, all the sketchy adblock extensions will follow, and after them the downright malicious but heavily advertised adblock extensions. Before long Google will have plenty of examples to point to of adblockers shipping malware, allowing them to scare off all the tech-illiterate people (who are the vast majority of users)
- deleted 1y ago[deleted]
- anon123412 1y ago[flagged]
- owebmaster 1y agoI'm with you with this idea but relying on firefox is not much better. I use PWAs a lot and Firefox decided that PWAs are not worth implementing or maintaining their past implementation. I still use firefox 70% of the time but this is wrong and go against what the users want.
- hannofcart 1y ago+1 to this. This is probably the only thing that keeps me from ditching Chrome/Brave and going back to Firefox.
- porridgeraisin 1y agoYep. That and stuff like the filesystem API. That thing is so useful for apps like excalidraw, photopea, etc,. They really need to implement it. They should at least implement it behind a feature flag, if they feel like virtue signalling how they're oh-so-concerned for the privacy implications. (while simultaneously launching an ads business in the backdrop)
- grantith 1y agoFloorp is a popular Firefox fork with PWAs enabled.
- owebmaster 1y agoThanks! Just migrated to floorp.
- Workaccount2 1y agoPeople like the service/product, but don't like cost. So the solution is mental acrobatics while using a backdoor for access.
- eviks 1y ago> for 20 years ... just temporary bandaids Using superior software for two decades is a very good bandaid
- mumbisChungo 1y agoWhat makes firefox better than brave?
- Sunspark 1y agoFor me, I like being able to set a default font/size/colour for all websites as an override. Chromium browsers don't do that out of the box. I like that it quarantines most of Facebook's shenanigans with cookies and the like. I can't compare Brave's adblock to uBlock Origin, but it's probably good enough.
- vachina 1y agoFirefox is not a Chromium fork
- esskay 1y agoAnd that makes it better why? Come on, this is pretty low hanging fruit.
- vachina 1y agoBecause it is an independent codebase free from any design decisions from Google. Chromium derivatives cannot stray far from Google’s interests.
- esskay 1y ago> Chromium derivatives cannot stray far from Google’s interests. Says who? It's opensource and has a BSD license, you can literally do whatever you want with it.
- Kwpolska 1y agoIt doesn't do crypto bullshit, for example.
- esskay 1y ago
- fooker 1y agoGreat, except firefox is pretty bad nowadays. Not their fault of course, with people not testing websites on non chrome derived browsers.
- WarOnPrivacy 1y ago> except firefox is pretty bad nowadays. Pretty bad as in that isn't true? Firefox is the option that doesn't intentionally leave users vulnerable to hostile adtech. Firefox is the option with containers. Past that it is performant and reliable under a wide variety of user loads and platforms. or Pretty bad as in Firefox+forks are better than the alternatives? It is true that some unfortunate default options were recently added to Firefox configs. Those options are unfortunate because they are variants of anti-user options baked into Chromium - options created to keep Chromium users susceptible to big-tech's worst intentions.
- ndriscoll 1y agoThose "default options" are precisely "intentionally leav[ing] users vulnerable to hostile ad tech" (e.g. PPA). It's built into the browser and on by default. Mozilla have very explicitly stated they believe ads are critical for the web. It is still better the chrome though (and a patch set like librewolf is better still).
- WarOnPrivacy 1y ago> Those "default options" are precisely "intentionally leav[ing] users vulnerable to hostile ad tech" (e.g. PPA). The difference between Firefox's 1x and Chromium's 100x + 100x is in the degree of harm visited upon the user. Finding harsh fault with former while giving the much more egregious example a pass -- this makes sense if one feels Firefox isn't abusive enough towards it's users.
- ndriscoll 1y agoLike I said chrome is worse, but both are made by ad companies who sell their users. I use and recommend librewolf as a better firefox.
- Retr0id 1y agoThe article is clearly not intended as an ad-blocking tutorial, it is an article about security research and API weirdness. Sure, it inspires ad blocking meta-discussion, but if you're complaining that the author has a strategically suboptimal approach to blocking ads then you have missed the point.
- billmcneale 1y agoNot everyone has your luxury of being able to choose their tools.
- john01dav 1y agoAnother advantage of this approach is that collectively it applies pressure against such toxic business models. This pressure can have an outsized impact for the number of people that do it because it skews towards technical people who will naturally influence their area of expertise more than the same number of lay users.
- dheera 1y agoFirefox still doesn't work. 1 - Google Meet consumes 40%-100% of my CPU on Firefox, and my laptop becomes a space heater 2 - My Yubikeys don't work. Touching them doesn't get into any of the websites I use that use 2FA. So, no Firefox.
- paffdragon 1y agoIs this on Linux? Do you have an example of a website where Yubikey does not work? I'm curious, because I use Firefox on Linux for years, also for work, and never hit a site where my Yubikeys would not work. (I'm also using Google Meet regularly for work from Firefox without problems)
- dheera 1y agoYes, Linux. No site works for me. Facebook, Google, none of them work. Even the demo at https://demo.yubico.com/webauthn-technical/ https://demo.yubico.com/webauthn-technical/ does not work.
- jacquesm 1y agoThat's strange. I use a yubikey under Linux/FF and it works like a charm and has done so since I started using them years ago.
- omnimus 1y agoBoth yubikes and gotrust idem kyes also work for me just fine. Maybe i am using them just for fido 2 factor and not some of the other protocols?
- dheera 1y agoWell, mine doesn't work, so I'm still using Chrome. When they make it work, I'll switch to Firefox. There should really be a big fat "report bug" button on all these apps that captures logs and sends it with 1-click permission and a voice recording to explain what's wrong, like Tesla FSD's bug reporting system. I don't have bandwidth to deal with their community forums and all the crap it takes to register for them.
- DANmode 1y agoThey finally enabled per site isolation by default after years of Chromium having it - still not in mobile though. Wonder what else I'm not aware of that they're slack on.
- deleted 1y ago[deleted]
- flufluflufluffy 1y agoBro it’s for the fun and interest of figuring it out. That’s what hackers do. The writer obviously knew it’s a “temporary bandaid” — they notified Google about it themself.
- johnnyanmac 1y agoI switched to Firefox, but I'm unfortunately stuck to Windows for professional work. I need several high profile software to get proper Linux support before I can make that jump. When I eventually go indie, though: I am 100% making use of a Linux workflow. >Do people need to jerked around 50 times for 20 years before realizing it will keep happening and their "bypasses" are just temporary bandaids? Sadly, yes. The networkign effect is extremely strong. Twitter was complained about even before musk, but it still too 3 years before people really started considering the move. emphasis on "consider": because twitter still has a lot of foot traffic for what it is in 2025.
- chii 1y ago> use Linux except that for a majority of users, windows is where their applications are at - such as gaming, word processing, or some other thing. Sure there are replacements (somewhat) for each of those categories, but they are not direct replacements, and require a cost of some kind (retraining, or a substitute quality). This is esp. true for gaming, and it's only recent that gaming has made some inroads via the steam deck (steamOS), which isn't available to a general PC (only handheld PCs with AMD processors iirc). People who say "just switch" to linux hasn't done it for their family/friends.
- ronjakoi 1y agoProton is available for desktop Steam as well, just pick your distro and go.
- debugnik 1y ago> (steamOS), which isn't available to a general PC Most of its secret sauce is either in Proton or upstreamed into Wine, DXVK, SDL, etc. All available to a general PC. Unless your focus is competitive online games, which often come with Windows-only anti-cheats, you've got a huge catalogue of great games playable on Linux distros. I did the switch about four months ago and I'm not missing Windows, the only pain point has been Nvidia drivers and I'll be solving that by switching vendors.
- 0points 1y ago> except that for a majority of users, windows is where their applications are at - such as gaming, word processing, or some other thing. Until you switch to linux you won't understand how inferior your windows setup always was. It's hard for us to tell you what you are missing out on, you simply need to experience it. I mostly game in a Windows 10 VM running on my Linux desktop computer. Single keypress to switch to Linux workspace. This is not because Linux gaming is horrible broken, but rather it gives me a fully separate leisure desktop, and my main Linux desktop is work only. It also gives me 100% compatibility, unlike wine. > People who say "just switch" to linux hasn't done it for their family/friends. When we say so here, we are telling you to switch. Nobody should be forcing anything on friends/family. I always suggest MacOS for friends/family for ease of support. I would never recommend Windows to anyone.
- sky2224 1y agoI get what you're saying, but the problem is the software does 90% of what I want really well and I like that they do that 90% super well and I want to keep that. In your Windows vs. Linux example, Linux just doesn't do a lot of things very well on the UI/UX side of things (e.g., window management, driver support, an out of the box experience). Knock Windows all you want, but it honestly does quite a few pretty important things very well. So that's why I'll spend some time to resist the negative changes.
- ObscureScience 1y ago>In your Windows vs. Linux example, Linux just doesn't do a lot of things very well on the UI/UX side of things (e.g., window management, driver support, an out of the box experience). That judgement confuses me a lot. Window management, drivers and out of the box experience has been much better in Linux for the last 10 years in my experience. Sure, there are some companies that don't ship drivers for Linux or the configuration software is not fully fledged. Window management has almost always been better in Linux, but of course depends on the WM. Windows innovated one nice feature in Vista (aero snap) which most desktop environments has implemented since. If you install Fedora, Ubuntu or Linux Mint, what are you lacking from that out of the box experience? Generally no driver installation needed, and no cleaning up of bloatware.
- Kwpolska 1y agoHave you ever used Linux with high DPI monitors? Windows handles them OK since Windows Vista, and really well since 8. I've seen the classic Windows XP bug of measurements not being scaled and labels being cut off on modern Linux. How about mixed DPI multi monitor setups? Great since Windows 10. On Linux, you're screwed. X doesn't support this. Wayland does, but not all apps work well with that, and not all apps and GPUs support Wayland.
- tpxl 1y ago> How about mixed DPI multi monitor setups? I've been using this since at least 2019, it's been fine. The only two issues are the mouse doesn't (always) align when moving across monitors and having a window across the display border has one side stretched, but why would you have windows like that?
- patrec 1y agoAnd using Google Firefox instead of Google Chrome is more than a temporary bag aid?
- Waraqa 1y agoIf you are using Chromebook, switching the browser is not an option
- temporallobe 1y agoI get it, and mostly agree, but sometimes consumers don’t have much choice with browsers and OSs; moreover, most consumers are simply technologically ignorant or agnostic of those things. Many users don’t even know exactly what a browser or OS is, and they just want to live their lives scrolling through tiktok or getting work done.
- zulban 1y agoI wasn't writing about consumers though. I was writing about "hackers" who might read this article and try this hack.
- ivanjermakov 1y ago> No idea why so many "hackers" doing "bypasses" can't instead take action that is simpler Because hacking is about solving hard and unnecessary problems