corbin @ corbin @infosec.pub

Posts

117

Comments

175

Joined

2 yr. ago

When you’re in Chrome or another browser, there’s an install option in the main overflow (three dots) menu.

I made a PWA that can quickly remove tracking variables called Link Cleaner. If you install it through Chrome or another Chromium browser on Android, it shows up as a share target, so you can share links to Link Cleaner and then share again to the intended target.

Or just an RSS reader, every channel has an RSS feed

There is no expertise in that interview, that’s the problem. It’s the Ghostery dev making vague statements that Engadget partially misinterprets and then everyone else gets wrong. The main insight there is that content blockers need their lists updated on a daily basis for YT which is not new information.

Ah yeah, that one didn't show up on my server. That's just an opinion about the overall situation, not disproving anything I said.

Already did! I don't think it was brutal, just asking technical questions.

The limit for dynamic rules is 30K (for basic block/allow) + 5K for more complex blocking, plus a minimum of 60K more for static complex rules: https://developer.chrome.com/docs/extensions/reference/declarativeNetRequest/#property-GUARANTEED_MINIMUM_STATIC_RULES

I agree the original article/quote was probably just worded weird and not being malicious. The issue is more all of the other articles that picked up on that with the wrong interpretation, as many outlets have through the whole Manifest V3 situtation.

I'm the author, yes.

On Android you can install LinkCleaner as a PWA using a chromium browser, it will show up as an option when sharing a link from Firefox or any other app.

It’s not the default because it can break links sometimes, like links that have authentication details in the parameters.

Not quite the same thing, but if you install LinkCleaner as a PWA using a chromium browser, it will show up as an option when sharing the link. Then you can copy to the clipboard or share it elsewhere.

I did say the element zapper was missing. uBO Lite is using the same default filterlists as uBO, which includes some trackers: https://github.com/uBlockOrigin/uAssets

There are malicious extensions found in the chrome web store pretty frequently, and if I was making one, I would definitely use the API that lets me man-in-the-middle all network requests. So google’s statement that 40% or whatever of malicious extensions use that API seems plausible to me.

You could definitely make the argument that Google should just do a better job of reviewing extensions, but that alone also wouldn’t be a 100% solution. Google definitely messed up with the original rule limits, though. If chrome is more optimized then surely it must be able to handle just as many (if not more) rules than uBO.

uBlock Origin has a Manifest V3 version, it's not going anywhere. I swear there are more people not reading anything here than Facebook.

This is actually about Daylight Savings Time

Right, my point was just that the article is wrong/clickbait. The changes won't "disable uBlock Origin" or "essentially kill off uBlock Origin".

This article is really wrong, wow. There is already a Manifest V3-compliant version of uBlock Origin, it's discussed in this thread: https://github.com/uBlockOrigin/uBlock-issues/issues/338

I don't know if it's stated definitively anywhere, but I'm pretty sure the plan is to roll out that different version to Chrome users as an update to the existing extension. It's going to be slightly worse because MV3 is still missing some API features.

Google owns YouTube and the AdSense advertising network. They don’t need to sell the data to advertisers because they are the advertiser. It’s more valuable for them to just hoard that for forever and use it for ad targeting.

They don’t make any money.