this post was submitted on 01 Aug 2023
830 points (100.0% liked)

Technology

37712 readers
206 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] pglpm@lemmy.sdf.org 141 points 1 year ago* (last edited 1 year ago) (6 children)

I don't understand why so many opinion pieces and news keep on saying that Web Environment Integrity could be abused and that's why we should oppose it. This misses the point a great deal.

Implementation of Web Environment Integrity in browsers IS ITSELF AN ABUSE, because I have the right to go around the web without continually proving who I am, even less against a 3rd party.

It's as if someone said that some officer (and not even a government one) should always be by your side when you go out, ready to certify who you are, whenever you speak with people on the street – and even with friends. Would you accept that?

Are we totally out of our minds??

[–] 1984@lemmy.today 40 points 1 year ago

I can only assume these opinion pieces are written by people who use Google for everything they do and trust them.

Dumb fucks, to quote Zuckerberg...

[–] skullgiver@popplesburger.hilciferous.nl 8 points 1 year ago* (last edited 11 months ago) (2 children)

[This comment has been deleted by an automated system]

[–] Joph@programming.dev 39 points 1 year ago (3 children)

That works until you are forced to interact with a website that only works with it, either by work or school.

[–] BarryZuckerkorn@beehaw.org 8 points 1 year ago (2 children)

That's already the case with most corporate managed BYO device policies. The typical scenario is that an employer gives you the choice:

  1. Use the company-owned and company-managed device. No root/admin access, no privileges to install unauthorized software, sometimes policies against personal accounts or files or use.
  2. Bring your own device, but consent to the company's IT department managing your security and potentially monitoring your use. If you're going to connect this device to the company's LAN (through wifi or VPN or otherwise), you're going to let us lock it down.

It's a legitimate concern that these types of things would normalize corporate-managed devices in our personal lives as consumers, and worth resisting in that space, but I don't think it would actually change the status quo in the corporate world to go from proprietary device management lockdowns to some kind of public standard for lockdowns.

load more comments (2 replies)
load more comments (2 replies)
[–] 1984@lemmy.today 10 points 1 year ago

Sure. Trust them to keep that button around... :)

load more comments (4 replies)
[–] azron@lemmy.ml 103 points 1 year ago (2 children)

So like 8% of the market, mostly from Mozilla?

[–] sadreality@kbin.social 26 points 1 year ago

Well... Normie stream love their 69 chrome versions so that's where we are at... Competition

[–] narc0tic_bird@lemm.ee 93 points 1 year ago (1 children)

Will have to wait and see how Apple reacts with Safari. Mozilla dismissing the proposal is big, but Apple has the second largest mobile OS marketshare with iOS, and so Safari is very relevant for websites to support it.

[–] Toribor@corndog.social 21 points 1 year ago (3 children)

Doesn't Safari already have their own version of this?

[–] ultratiem@lemmy.ca 41 points 1 year ago* (last edited 1 year ago) (4 children)

Lmao, no. Google is out of their minds. Apple has zero interest in controlling browsers or ads.

https://money.cnn.com/2017/08/31/technology/business/apple-net-neutrality/index.html

From the article:

"We work hard to build great products, and what consumers do with those tools is up to them — not Apple, and not broadband providers," Cynthia Hogan, VP of public policy at Apple

Prove it, then. Unlock the bootloader. Allow us to install our own apps. Let us install our own OS on the hardware. I get they don't want to open source their iOS, that's fine. They say "what consumers do with those tools is up to them", but then they lock those tools down TIGHT. Actions speak much louder than words. They say those tools are ours? They need to show us that this is true.

[–] shrugal@lemm.ee 38 points 1 year ago
[–] sik0fewl@kbin.social 27 points 1 year ago (1 children)
[–] ultratiem@lemmy.ca 9 points 1 year ago (4 children)

A part of Apple’s long term, multi-stage deployment to phase out passwords entirely. They announced it last year during WWDC and said it will be messy and not without hurdles, but they’re committed to having strong cryptography without need for password at all.

Related: https://www.wired.com/story/apple-passkeys-password-iphone-mac-ios16-ventura/

A far cry from what Google is trying to do or their long term plans (we all know Google is trying to siphon more ad revenue).

Google’s proposition is as bad for Apple as it is for the rest of us.

[–] that_one_guy@beehaw.org 23 points 1 year ago (1 children)

Honest to god doublethink right here.

load more comments (1 replies)

Passkeys (which are broader than just Apple) and this are not related at all. Regardless, Apple absolutely has interest in controlling browsers. Hell, they already do it on iOS, where you can't use any rendering engine other than theirs.

The only reason they might be against this is because they feel they can't control it the way they want.

load more comments (2 replies)
load more comments (1 replies)
load more comments (2 replies)
[–] SloganLessons@kbin.social 48 points 1 year ago* (last edited 1 year ago) (1 children)

Google: "How cute, anyway as I was saying..."

[–] kionite231@lemmy.ca 9 points 1 year ago

Google doesn't care 🙁

[–] whoiscraig@aussie.zone 41 points 1 year ago
[–] yoz@aussie.zone 40 points 1 year ago (1 children)
[–] floofloof@lemmy.ca 58 points 1 year ago (2 children)

It's "dismissed" as in "they say it's rubbish". It doesn't mean they won't ultimately be forced to use it.

[–] yoz@aussie.zone 15 points 1 year ago
load more comments (1 replies)
[–] floofloof@lemmy.ca 33 points 1 year ago* (last edited 1 year ago) (7 children)

Microsoft are staying suspiciously quiet then. And what about Apple?

[–] shrugal@lemm.ee 34 points 1 year ago (1 children)
[–] floofloof@lemmy.ca 10 points 1 year ago (1 children)

Is this technically equivalent to Google's proposal? Apple say that their version was developed in collaboration with Google, so it would be surprising for Google to go and deploy a second version of the same thing, were it not for the fact that Google always has two competing versions of everything.

And I guess the main reason people are more concerned about Google's version is that they are so dominant in the browser market.

[–] shrugal@lemm.ee 23 points 1 year ago

The details are a bit different. PATs use HTTP headers during a request while WEI is a JS browser API. But otherwise the general structure and end result are the same. A website requests an integrity check, an attester checks your device, and if the attester doesn't like your device then you're SOL.

[–] tunetardis@lemmy.ca 22 points 1 year ago (2 children)

Edge is a Chromium browser isn't it? Then again, so is Brave and the article indicates they are making a point of removing this stuff from their build. Safari is it's own thing though afaik.

[–] fushuan@lemm.ee 18 points 1 year ago (1 children)

Brave is a chromium fork with custom stuff, they can just not implement it if they want.

[–] floofloof@lemmy.ca 14 points 1 year ago* (last edited 1 year ago) (1 children)

There needs to be a unified fight against this, that involves not only browser companies but also the businesses running major websites. If it goes through and Google manages to persuade websites to use it, all the other browsers will be forced to implement it if they want to continue existing. And then no more freedom for web users.

[–] 01189998819991197253@infosec.pub 18 points 1 year ago (7 children)

You're right. But it's so much worse than that.

Imagine, for a minute, that this passes. If a website exists that a specific entity disagrees with (say... a whistleblower forum, or accounts of how Google is abusing its powers, or accounts of a Government is abusing it's citizens), all that would need to happen, is for the "integrity authority" to deny access to that site, and it will be censored. Whereas now, a website has to be taken offline (in most cases) to be effectively censored, if this passes, the "integrity authority" would just need to say nay.

Imagine never hearing of the Snowden files, or George Floyd, or the Russian-Ukraine war. Not because they didn't exist or didn't happen, but because you 'weren't allowed' to see them by an entity who benefits from you not seeing them or knowing about them.

If this passes, we would be -officially- entering a dystopia.

[–] scrubbles@poptalk.scrubbles.tech 14 points 1 year ago (1 children)

It's kind of the opposite of this though, it's not censorship. It's not that you aren't allowed to visit other sites, it's that sites can choose to let you in or not.

The scary part is we don't know what makes that decision, and from Google's proposal is that it could just be anything they decide. So it's not censorship, but it is saying "You aren't playing by our rules (like by using an ad blocker, or you visited too many whistleblower forums, or we just plain decided we don't like you) so you don't get to use gmail/your bank/whoever decides to implement this"

load more comments (1 replies)
load more comments (6 replies)
load more comments (1 replies)
load more comments (5 replies)
[–] victron@lemm.ee 21 points 1 year ago (4 children)
load more comments (4 replies)
[–] CarnyVeil@beehaw.org 13 points 1 year ago (3 children)

At this point, why don't the companies who run Chrome derivatives work together to build a fork that evolves separately from Chrome? Edge, Vivaldi, Opera, etc. will never get the marketshare on their own to rival Chrome, but together, they could make a dent with a unified browser engine.

[–] takeda@beehaw.org 16 points 1 year ago

Gecko (Firefox engine) already is worked on, why not contribute there instead of losing community? If anything why those browsers use engine that is controlled by a single company?

[–] atyaz@reddthat.com 12 points 1 year ago

Alternative plan: why not use gecko? I know it's more work to do so, but I would call that the lesser of two evils at this point.

[–] b_antunes@startrek.website 8 points 1 year ago

Because it's very expensive to do so, unfortunately.

[–] ruination@discuss.tchncs.de 9 points 1 year ago

As it very well should be. Fuck Google.

load more comments
view more: next ›