Jump to content

Chromium V3 manifest is limiting your freedom with security excuse


Mr.Scienceman2000
 Share

Recommended Posts

https://developer.chrome.com/docs/extensions/mv3/intro/

In short Chromium will be removing webRequest api and replace it with chrome.declarativeNetRequest in next month with Manifest V3 (V2 will be crippled away). This of course is done in name of security because google is worried from following to end user.

Quote

The blocking version of the webRequest API is restricted to force-installed extensions in MV3. This is because of issues with the blocking webRequest approach:

Privacy: This requires excessive access to user data, because extensions need to read each network request made for the user.

Performance: Serializing & deserializing data across multiple process hops & the C++/JS boundary adds up.

Compatibility: Does not work well with event-based background execution as it requires the service worker to be running to handle every request.

Now when I said official story I can say my opinion on this. That is total lie and only purpose of that is to limit privacy add-ons like noscript, ublock origin, Umatrix etc from having higher control over your browser. New api replacing it will not allow addons directly read data and will force request trough chromium (source). Also that wont limit addons from stealing your data because malicious addons today wont need to read your browser traffic to steal passwords or or other data. But of course anything can be done with security excuse.

And if you think some alternatives like Firefox or Coward I mean Brave will not do it remember that Firefox is funded by Google and it past they killed off XPCOM addons in name of security, forced addon signatures, added hard blocklist for addons and Brave gets paid from Google to use their search engine plus it uses Chromium engine as default, it includes it own spyware, it uses addons still for contect blocking.

And some actually good forks like Librewolf and Ungoogled chromium are in uphill battle with mainstream decisions and developers of librewolf has admitted they have problem hand.

And UXP based browsers like Palememe or Serpent suffer from compatibility issues with Chromium JS and WASM made pages so those are not so great either for all use.

Feels like every day I want get more away from internet, but world forces me to use online services to do basic things because offices are closed or resisted access

 

Edited by Mr.Scienceman2000
Link to comment
Share on other sites


It is in January 2023 that Chrome stops running manifest v2 extensions:

https://developer.chrome.com/docs/extensions/mv3/mv2-sunset/

It's not my area of expertise, but one solution is to implement blocking at the DNS level.
But in this case, cosmetic filtering would be missing.

Raymond Hill writes that he currently has no solution to the noop rule which is currently unworkable.

 

Very useful to start decreasing the filters used in UBO.

At the moment in Edge I have:

41406 network filters 37824 cosmetic filters

Edited by Sampei.Nihira
  • Like 1
Link to comment
Share on other sites

30 minutes ago, Sampei.Nihira said:

It's not my area of expertise, but one solution is to implement blocking at the DNS level.

But in this case, cosmetic filtering would be missing.

there is soluction for that if you have spare linux box or VM to utilise.

https://pi-hole.net/

I am using that and it with default lists works great for blocking ads in network level. Sometimes UBO might conflict with that.

Also make sure you wont blacklist any CDN you may need because some lists on by default.

30 minutes ago, Sampei.Nihira said:

Very useful to start decreasing the filters used in UBO.

At the moment in Edge I have:

41406 network filters 37824 cosmetic filters

I agree with this. In my tests on Chromium, Gecko and Goanna based browsers enabling excess amount of blocklists wont block more ads or trackers and only slows down browsing.

I only use UBO for cosmetic blocking and Umatrix will handle ads and tracking blocking. Also ublock is helpful to block anything that umatrix is missing for some reason because sometimes you cant block all visual annoyances and ublock works great for it.

I only use built in filters and adblock filter list for finland and my custom cosmetic filters on it.

Edited by Mr.Scienceman2000
  • Like 1
Link to comment
Share on other sites

34 minutes ago, testaccount66766 said:

well I have not closely followed that sinking ship but their engine seems not allow do anything for those privacy settings on palememe based browser even when I allow js. It works on ungoogled chromium and librewolf so useless and inferior to searx, which can do ddg and google results and I can run it on my private instance

And thing is violators will never change for better. For example privacy respecting Duckduckgo used to run data collection operation before was privacy respecting vendor. Always look under curtain and you see more than before. Like I said you still got lot to learn in life (so do I and everyone else) and that if something sounds too good to be true it is not true.

Edited by Mr.Scienceman2000
Link to comment
Share on other sites

  • 3 months later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.


×
×
  • Create New...