mhoye

Some outstanding conceptual judo in the opening paragraph of this proposal. “Often depend … may assume … certain aspects of”… therefore we would like to propose killing non-chrome user agents in general and ad blockers in particular.

https://github.com/RupertBenWiser/Web-Environment-Integrity/blob/main/explainer.md

Web-Environment-Integrity/explainer.md at main · RupertBenWiser/Web-Environment-Integrity

Contribute to RupertBenWiser/Web-Environment-Integrity development by creating an account on GitHub.

GitHub
Jul 19, 2023 at 3:51pmWeb
Show threadmhoyeJul 19, 2023
Human-facing, client-side platform-state attestation tools are not going to be used to secure the agency or well being of humans. As soon as they hit production they are going to be used to defend businesses and business models at the expense of human choice and agency. Intentions are irrelevant, they are worth nothing, and anyone building these tools claiming that they serve a human good is lying to you, themselves or both.
Show threadmhoyeJul 19, 2023
Exhibit 1, exhibit 2, and I'm kissing my fingers like a chef here.
Show threadmhoyeJul 19, 2023
Dissenting vote registered: https://github.com/RupertBenWiser/Web-Environment-Integrity/issues/28#issuecomment-1642559280
Don't. · Issue #28 · RupertBenWiser/Web-Environment-Integrity

Sometimes you have to ask the question whether something should be done at all, and trusted computing is certainly one of those cases where the answer is obviously a big fat NO. So please reconside...

GitHub
Show threadAriadneJul 19, 2023
@mhoye Likewise.
Show threadrain 🌦️Jul 19, 2023
@mhoye you're likely aware of this already, but Apple did it first with Private Access Tokens which ship in the current versions of both macOS and iOS.
Show thread«lambalicious»Jul 19, 2023

@mhoye Time to let them know (harder):

https://github.com/RupertBenWiser/Web-Environment-Integrity/issues/28

Don't. · Issue #28 · RupertBenWiser/Web-Environment-Integrity

Sometimes you have to ask the question whether something should be done at all, and trusted computing is certainly one of those cases where the answer is obviously a big fat NO. So please reconside...

GitHub
Show threadbrennenJul 19, 2023
@mhoye as just kind of an added bonus, as soon as i heard about this i was like welp, that's gonna make every last thing about writing web software some measurable percentage more dogshit.
Show threadMichael HartleJul 19, 2023
@mhoye Also an attack on the not-too-level playing field enabled by open #InternetStandards, as with the use of #ClientSideAttestation, they get to make sure it's only "authorized" implementations.
Show threadfuricleJul 19, 2023
@mhoye oh my Lord. I am responsible for inquiring their income now?
Show threadChris [list of emoji]Jul 19, 2023

@mhoye

This seems very much like, "let's make something that isn't the Web but call it the Web."

Show threadmhoyeJul 19, 2023
@suetanvil “What if the web was just like the web except it was also a television and the whole idea that a user agent would be beholden to the user and grant them agency was … let’s say a lot less inconvenient for our bottom line. Wouldn’t that be great.”
Show threadChris [list of emoji]Jul 19, 2023

@mhoye

That's very 1997 of them.

Show threadAaronJul 19, 2023
@mhoye This pull request seems to really clarify things.

https://github.com/RupertBenWiser/Web-Environment-Integrity/pull/29/commits/66c3d8d8af0527191f6af8f4d210aebd21b074ca
Clarify language by ShittyKopper · Pull Request #29 · RupertBenWiser/Web-Environment-Integrity

#28

GitHub
Show threadOrcJul 19, 2023

@mhoye I particularly like it that the very first rationale they offer is anti-adblocking.

Yeah, sure, I'm sure they care about the security of your web browser.

Show threadSimon RichterJul 19, 2023
@mhoye @suihkulokki and youtube-dl
Show threadArneBabJul 20, 2023
@mhoye … and to require all browsers to be vetted by a remotely controlled agent on the device.