Granular control over requests is completely lost in Manifest V3.
For example, with Manifest V2 we can initiate a request from a content script after we begin listening for it from the background script, pass a single-use token in the Accept header, identify the request from the background script based on the token, remove the token from the Accept header and edit other headers before the request is sent to the server, then manipulate the response for that single request and stop listening from the background script.
I use this workflow in Search by Image to grab an image from the page context when no CSP headers are present for the asset, and the image is only served if a certain cookie and referrer is sent. This will no longer be possible to achieve with the current API of Manifest V3. Extensions used for page archival will also be impacted.
Manifest V3 removes a robust toolset that content blockers can use the react to all evasion techniques ad companies implement, and the rest of the extension ecosystem will be part of the fallout.
One of the interesing things about this story is that there appears to be no consideration of not "updating" to a new Chrome version. The idea of user choice in "updating" is completely absent. Why cannot a user say, "V3 sounds wonderful but I will stick with V2, thank you." A user has a version of a program that works for that user (e.g., with uBlock Origin), and Google can apparently forcibly stop that user from using that working version, through a process of "automatic updates". Users must "accept" updates which makes one wonder Google can pull this off. Does it not rely on user behaviour. By accepting every "update" without question, the user is effectively consenting to being controlled.
Perhaps users will someday "wake up" to realise that so-called updates are not necessarily being remotely installed for their benefit, but for the benefit of someone else. No doubt Google has some parallel construction type explanation why users need V3, but how many folks cannot see that they are letting the fox guard the henhouse.
Perhaps if ads can be blocked, so too can updates. (IME, it's possible.)
Just boycott Chrome, as a user and as a developer. And boycott any other Chromium-based browser altogether.
The only reason why a mediocre ads company like Google is managing to mess up the web is that it has >90% of the browser's market share, if you include all Chromium-based browsers.
If they can periodically break the basic functionalities of web extensions however they like (HTTP calls within extensions, background scripts, ability to manipulate the DOM...) just to ensure that people won't manage to block ads and trackers, and they still get developers to build stuff for their browser and they don't lose a single user, they can really get away with EVERYTHING.
Time to let them know that they can't really get away with everything. Google has been an evil company beyond redemption and with a net negative added value to the industry for too long and now it deserves to go down. MV3 should be the reason why developers should stop building extensions for Chrome, users should stop using Chrome, and other browsers should move to other web engines than Chromium.
If nobody follows Google in their efforts to push for MV3, then we'll be left with a limited browser with limited functionalities and nearly no extensions. Let Google sink in their own sh*t.
If you are on a Mac, I suggest that you try Orion browser (currently in beta) [1]. It is based on WebKit, with a custom port of web extensions API [2].
Not only that it runs Chrome and Firefox web extensions like uBlock Origin but we will be keeping support for Manifest v2.
For all the claims that the sky is falling, I'd like to know which functionality is still missing in declarativeNetRequest. Extended rule limits, dynamic rules, and header modification have been added. What else is required for a functional adblocker?
This reddit thread barely seems to understand the issue, never mind the technical deficiencies of the API.
How about posting what we’re losing for those out of the loop. That Reddit link is pretty useless.
This link is useless for people who do not know what manifest v3 is.
Here is a actual source: https://developer.chrome.com/docs/extensions/mv3/intro/
Much better article:
https://www.eff.org/deeplinks/2021/12/chrome-users-beware-ma...
FYI Brave Browser doesn't intend on deprecating Manifest v2 and the blocking version of the webRequest API[0]. A discussion has even started on whether to stand up their own extension marketplace[1]
[0]https://www.zdnet.com/article/opera-brave-vivaldi-to-ignore-...
Not saying this is good enough, but there's still 12 months before this needs to happen?
https://developer.chrome.com/blog/mv2-transition/
> As we look to the future by continuing to iterate on and improve upon Manifest V3 functionality, we also want to share details about the plan to phase out Manifest V2 extensions.
> There are two key dates for the phase-out:
> January 17, 2022: New Manifest V2 extensions will no longer be accepted by the Chrome Web Store. Developers may still push updates to existing Manifest V2 extensions, but no new Manifest V2 items may be submitted.
> January 2023: The Chrome browser will no longer run Manifest V2 extensions. Developers may no longer push updates to existing Manifest V2 extensions.
Fuck. Just when I got used to Chromium due its nice profiles feature.
Sigh. Back to Firefox then. Or perhaps I should just stop using the web for anything except the necessities. Now that I think about it, that would probably make my life better in more than one way.
Like the EFF said, Chrome is a Google agent not a user agent. Switch to Firefox on desktop and mobile.
The end game on this is that there will be browsers that support ad blocking and browsers that don't. Content vendors will go all out on blocking users that don't use their preferred mandatory ads browsers, and the 'web' as we know it will suffer.
Time and time again I try to switch to Firefox. But it always seems to fall short (for me at least).
I rely too much on separate profiles to disconnect work-related browsing from personal browsing. Separate bookmarks, sessions, browser plugins, sync preferences etc...
A UI that's as powerful is literally all that is needed for me anyway. Its such a shame they've neglected the Profile Manager.
Fuck. I'm getting too old for this shit. The cat and mouse game of Google / AdTech vs the general public has gone off the deep end. Popups. Popovers. Popunders. Content shifting. Paywalls. GDPR Alert! Chatbots. Can I send you a Cookie? Ok. Can I help you find something? No. Wait! Don't close the page yet! Coupon code? No. Subscribe to our newsletter? No. Autoplaying video. How To Make A Million Bucks A Month Selling On Amazon! You Can Be A Handsome Guy On A Beach Making Money Just Like Me! For. Fucks. Sake.
I just want to use the web to access a few of my favorite news sites, use Github, access documentation, watch the (very) occasional YouTube vid, and send email. Am I a dying breed? A mere rounding error in the pie chart of web users? Maybe.
But I am truly at a loss for what to do next. Using the internet without uBO is like sticking needles into my eyeballs. "Switch to Firefox!" they said. I've tried, many times. But I really need some simple things that FF can't provide. Like being able to work with JXA to grab tab URLs for some Alfred scripts and other automations I rely heavily on. There's a 20-year old feature request for this[0].
Ok, Brave then? Probably the best option right now, but it keeps me up at night thinking one day Google will actively start going after the forks, making their lives difficult enough in one way or another to the point that they have to shut down.
Safari? I haven't checked in a while but there were some critical extensions that just didn't exist last time I checked- things like Rich URL[1] for copying tabs as markdown (so useful!). Dev tools were meh.
Just feels like there aren't any good options. Rock and hard place. Google, enough is enough—why are you doing this? (rhetorical. we know why)
[0]: https://bugzilla.mozilla.org/show_bug.cgi?id=125419
[1]: https://chrome.google.com/webstore/detail/rich-url/bkjdcppkd...
I come from the Mozilla Suite then Phoenix era of times and I am still glad I never switched to Chrome as my main browser.
I remember a time when Google used to crank out a seemingly endless stream of stuff that basically were tremendous improvements to the internet.
Chrome itself was one of those amazing improvements.
These days are long gone it seems.
As a matter of fact, the exact opposite seems to be happening right now: every change coming out of a Google seems to improve their lot at the detriment of everyone else, especially their users.
The time to ditch Chrome was ~5 years ago, but if you aren't convinced yet, this latest "improvement" should be the straw that breaks the donkey's back.
I'll probably switch to a system-wide adblocker like Adguard. It's already a life-saver on Android.
It seems the chrome team has been fabricating a hostage situation with their own foot for the past year or two. They keep yelling that they'll shoot it any day now, yet we don't seem any closer to it.
I wish them the courage to finally pull the trigger.
Does this affect Brave?
Is Privacy Badger affected as well? (how is Privacy Badger different from uBlock?)
This is why I switched back to Firefox three years ago. The writing was on the wall for ad blockers in Chrome. I want one that works. I want control over my web experience.
Firefox is absolutely fantastic nowadays, and I strongly encourage everyone to start using it as their primary browser. It's hard to overstate how important it is to have at least two independent browser implementations around.
If Firefox dies then Chromium would become the de facto rendering engine, and we'll no longer have any meaningful specification for web standards. The web will simply be whatever Chromium does including all its quirks. We've already seen the horrors of that back in the days of IE.
Furthermore, Google is fundamentally an ads company and it should not be the gatekeeper for the internet. I highly recommend reading a recent antitrust filing regarding how Google has worked with Facebook and Microsoft to discourage them from increasing user privacy
https://storage.courtlistener.com/recap/gov.uscourts.nysd.56...
Google has a secret deal with Facebook called "Jedi Blue" that they knew was illegal and has a whole section describing how they'll cover for each other if anyone finds out. Google has a team called gTrade that is wholly dedicated to ad market manipulation.
Google had a plan called "Project NERA" to turn the web into a walled garden they called "Not Owned But Operated". A core component of this was the forced logins to the chrome browser you've probably experienced.
Google is willing to do almost everything to prevent people from circumventing their ad exchanges which is what AMP is all about. Google habitually does insider trading on their ad exchanges in every way possible.
The exchanges are also rigged so that google wins on bids where they aren't the highest bidder. A large amount of people inside Google are aware of all of this.
Google has worked with Facebook and Microsoft to discourage them from increasing user privacy, lamenting occasions where they prioritized their reputation over their collective business interest.
[citation needed]
Last time I checked, the author was going to attempt a port of uBlock to Manifest v3:
https://www.reddit.com/r/uBlockOrigin/comments/ntlgkv/commen...
How long until Google pulls funding for Firefox to kill the browser so that ad blocking becomes impossible across the board?
Is there anything that can be done about this?
I'm down to email someone, put up a banner on my website or call, I don't know.
profiles are my number one reason for using chrome as well.
i need them because of my bookmarks. i have close to 6000 bookmarks. 20 years and counting of curated and tagged web links. chrome syncs them across all my devices. i have to do the import gymnastics once in a while for edge and safari. but that's it.
why are bookmarks still browser-specific and not a OS-level feature? why do we need all that import/export gymnastic?
bookmarks are links to web sites, apps, or pages. they should have never been browser-specific. i want to be able to access them from all my devices. they should have been like my photos, or my music collection. and yet, they are not...
For Microsoft to really rain on Google’s parade here, don’t all they have to do is allow V2 compliant extensions into their extension store? If so that would be a grand opportunity.
Will PiHole(so?) be able to block ads before chrome can render them or will these Manifestv3 changes break pages from loading?
I'm pretty happy with my switch to Brave half a year ago.
Was a bit rough around the edges at the beginning, but it got quite good.
Brave for life it is I guess.
FYI, Manifest v3 is also coming to Firefox browser.
https://blog.mozilla.org/addons/2021/05/27/manifest-v3-updat...
Good. Maybe some people will drop Chrome now.
WTF is PSA
*Off-topic:* I've experimented with a new layout in Firefox, and now I can't think of going back.
I first installed Tree Style Tab. I then removed the tabs at the top of the window and added a permanent status bar to the bottom of the window using userChrome.css: https://i.imgur.com/PIONywj.png (edited to add, my userChrome.css: https://gist.github.com/anthonyclarka2/155c038de96e91894cbd4... ) (EDIT: I added some extra css to this to set the titlebar and system UI buttons - use the first revision if you don't want that)
The tree style tabs are wonderful. I can see a grouping of tabs, see which tab is the "parent" of a bunch of pages. I often have a root tab with Jira current sprint, then a ticket sub item, then branching from that I have various documentation and github pages open. All of those pages together form one mental "unit" of related information and work.
I'm sorry to post this in a somewhat unrelated thread, but I'm geeked out by how well this works! Firefox is better for my needs anyway, because I can tag bookmarks. Much easier to find saved pages through searching tags for "emacs, babel, python" for instance. Or "firefox, tabs, css"
*On-topic:* This move by Google is going to lose them a ton of browser users, I think. People love blocking ads! Especially tech-minded folk, who are often asked to recommend software or repair things for less knowledgeable or comfortable people.
I'd also like to see a Chromium fork that continues to allow the Manifest V2 API.
Color me shocked.
Why does anyone use Chrome anymore? Firefox is better in every way, and it isn’t tied to the biggest data harvester the world has ever known.
People still use Chrome? I get that experimental web APIs are cool and all, but why not switch over to Brave or Firefox?
Brave shilling is out of control in this thread. As if I needed any more reasons not to use that cryptomining trash.
> We introduced a zero- tolerance harassment policy and waived required arbitration of sexual harassment and discrimination claims. We have made significant commitments to increase gender diversity and are dedicating $250 million to accelerate opportunities for diverse talent across the industry.
“We made it easier to destroy someone’s career with false sexual harassment charges, and also we discriminate against the main gamedev demographic”.
Are people really that adamant about blocking ads on the web? I don't understand why people think it's a good idea to remove the primary source of revenue for content creators. At the most it amounts to a very mild annoyance and ads also help small businesses to grow.
Edit: I'd appreciate it if someone could respond to the points I made rather than simply complain about why they don't like ads.
Discussed most recently 2 days ago: https://news.ycombinator.com/item?id=29502439