this post was submitted on 14 Aug 2023
2062 points (97.6% liked)

Memes

45663 readers
1103 users here now

Rules:

  1. Be civil and nice.
  2. Try not to excessively repost, as a rule of thumb, wait at least 2 months to do it if you have to.

founded 5 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] ThatWeirdGuy1001@sh.itjust.works 5 points 1 year ago (1 children)
[–] fylkenny@feddit.de 70 points 1 year ago (2 children)

I guess because of the web environment integrity API proposed by Google. It enables your browser to tell the website it hasn't installed AdBlock or any other undesired add on. This is marketed as improving security, but will mainly be used to block browsers which block adds.

[–] Haui@discuss.tchncs.de 35 points 1 year ago (1 children)

And big plus for google: it can be extended very well. The site sees any extension installed, if the browser is headless. So only google can use bots in the future and can rake in all the ai training profits and sell all the searchengine ads.

Wei is a lot more than ad block control.

[–] theneverfox@pawb.social 14 points 1 year ago (1 children)

It's not just open to Google and it doesn't stop there either. Amazon could refuse to work if you're on a phone and don't have their app, or it could tell you to uninstall the Alibaba app before using

The possibilities are endless, and all benefits to be had are on the corporate side

[–] Haui@discuss.tchncs.de 1 points 1 year ago

I knew there‘d be some people with actual knowledge of the matter. Thanks for mentioning it.

[–] XTornado@lemmy.ml 4 points 1 year ago (1 children)

I mean for some rare specific usages it could be usefull like ensuring bank webpages integrity or similar but mostly and the main usage would be for what you said.

[–] theneverfox@pawb.social 1 points 1 year ago

It doesn't though - it basically ensures your device settings.

Is that integrity? Maybe - if the attester code is flawless and handles all situations perfectly, it could theoretically add to integrity, but that's not a realistic outcome

It's not designed for that. It can only block the site - it doesn't add to security, it takes away from it.

Say a bank designs their own attester - suddenly you have code that, if compromised, is always run in the most privileged execution context, in a way the user can't control right before you enter your bank password