``` Chrome's new adblock-limiting extension plan is still on. The company paused the rollout of the new "Manifest V3" extension format a year ago after an outcry over how much it would damage some of Chrome's most popular extensions. A year later, Google is restarting the phase-out schedule, and while it has changed some things, Chrome will eventually be home to inferior filtering extensions.
[...] Google's sales pitch for Manifest V3 is that, by limiting extensions, the browser can be lighter on resources, and Google can protect your privacy from extension developers. With more limited tools, you'll be more exposed to the rest of the Internet, though, and a big part of the privacy-invasive Internet is Google. The Electronic Frontier Foundation called Google's description of Manifest V3 "Deceitful and Threatening" and said that it's "doubtful Mv3 will do much for security." Firefox’s Add-On Operations Manager also didn't agree with any claims of privacy benefits, saying that, while malicious add-ons "are mostly interested in grabbing bad data, they can still do that with the current webRequest API." In a later article, the EFF also points out that Google's "lighter on resources" argument also doesn't really hold water. Anyone can open the Chrome Task Manager and see that a single website can take up a huge amount of memory, often in the 200MB-plus range. On the high end now for me, Slack is drinking 500MB, while a single Google Chat tab, created by this company that is so concerned about performance, is at 1.5GB of memory usage. Something like uBlock Origin, across all your tabs, is in the 80MB range. The one part of Manifest V3 that everyone can agree on is that it will hurt ad blockers. Google is adding a completely arbitrary limit on how many "rules" content filtering add-ons can include, which are needed to keep up with the nearly infinite ad-serving sites that are out there (by the way, Ars Technica subscriptions give you an ad-free reading experience and make a great holiday gift!). Google originally went with a completely crippling limit of 5,000 "dynamic" rules, and after the widespread outrage during its first attempt to push Manifest V3, the company upgraded filtering to a "more generous" limit of 30,000 rules. uBlock Origin comes with about 300,000-plus filtering rules you can enable, and you can also import additional blocking lists and have that number skyrocket. As far as we can tell, there's no justification for arbitrarily limiting the list of filter rules. Manifest V2 does not have a limit and works great. ``` https://arstechnica.com/gadgets/2023/11/google-chrome-will-limit-ad-blockers-starting-june-2024/ Ora di passare a Firefox? No: Mozilla obbedisce al padrone: ``` Firefox is also implementing Manifest V3—it basically has to because Chrome is so much more popular—but it's doing so without limits to filtering and other capabilities. Mozilla's blog post on the subject promises "Firefox’s implementation of Manifest V3 ensures users can access the most effective privacy tools available like uBlock Origin and other content-blocking and privacy-preserving extensions." ``` Chissà se il Cyber Resilience Act tornerà utile in questo caso? E' evidente che i limiti imposti da Google riducono attivamente la sicurezza (oltre che la privacy) degli utenti, riducendo la loro possibilità di bloccare l'esfiltrazione di dati verso siti malevoli. Giacomo _______________________________________________ nexa mailing list nexa@server-nexa.polito.it https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa
