TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

“Web Environment Integrity” is an attack on the free Internet

415 点作者 jrepinc将近 2 年前

15 条评论

dang将近 2 年前
Related. Others?<p><i>Google&#x27;s browser security plan slammed as dangerous, terrible, DRM for websites</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36893071">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36893071</a> - July 2023 (63 comments)<p><i>Google Web Environment Integrity Is the New Microsoft Trusted Computing</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36888156">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36888156</a> - July 2023 (282 comments)<p><i>Google employee responds to negative feedbacks on WEI</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36881506">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36881506</a> - July 2023 (25 comments)<p><i>Google is already pushing WEI into Chromium</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36876301">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36876301</a> - July 2023 (832 comments)<p><i>Unpacking Google’s Web Environment Integrity specification</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36875940">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36875940</a> - July 2023 (431 comments)<p><i>Google engineers want to make ad-blocking (near) impossible</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36875226">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36875226</a> - July 2023 (468 comments)<p><i>Google vs. the Open Web</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36875164">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36875164</a> - July 2023 (191 comments)<p><i>Apple already shipped attestation on the web, and we barely noticed</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36862494">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36862494</a> - July 2023 (421 comments)<p><i>Google’s nightmare “Web Integrity API” wants a DRM gatekeeper for the web</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36854114">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36854114</a> - July 2023 (456 comments)<p><i>Web Environment Integrity API Proposal</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36817305">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36817305</a> - July 2023 (441 comments)<p><i>Web Environment Integrity API</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36808231">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36808231</a> - July 2023 (2 comments)<p><i>Web Environment Integrity Explainer</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36785516">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36785516</a> - July 2023 (45 comments)<p><i>Google Chrome Proposal – Web Environment Integrity</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36778999">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36778999</a> - July 2023 (93 comments)<p><i>Web Environment Integrity – Google locking down on browsers</i> - <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=35864471">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=35864471</a> - May 2023 (1 comment)
butz将近 2 年前
Why are we letting Google get away with such nonsense? First(?) was the toast component, then removal of alerts, manifest v3, FLOC, now this. Sure, corporations are going to corporate away, so what are the options for us, users, and future users, who currently do not care, but might find current iteration of internet useful? I don&#x27;t mind Google shutting all their products behind some wall, that requires using custom unmodifiable browser to access them, but do not spread it all over the place. We are still &quot;enjoying&quot; unsolvable recapthas everywhere.
评论 #36912540 未加载
评论 #36920911 未加载
评论 #36914002 未加载
评论 #36911909 未加载
shiomiru将近 2 年前
By the way, a very similar API has apparently been implemented in Safari since 2022. Seems like better marketing does wonders, as I haven&#x27;t seen any discussion of this.<p><a href="https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;eliminating-captchas-on-iphones-and-macs-using-new-standard&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;blog.cloudflare.com&#x2F;eliminating-captchas-on-iphones-...</a><p>Some interesting bits:<p>&gt; [...] We don’t actually need or want the underlying data that’s being collected for this process, we just want to verify if a visitor is faking their device or user agent. [...]<p>&gt; [...] In the example above, a visitor opens the Safari browser on their iPhone and tries to visit example.com.<p>&gt; * Since Example uses Cloudflare to host their Origin, Cloudflare will ask the browser for a token.<p>&gt; * Safari supports PATs, so it will make an API call to Apple’s Attester, asking them to attest.<p>&gt; * The Apple attester will check various device components, confirm they are valid, and then make an API call to the Cloudflare Issuer (since Cloudflare acting as an Origin chooses to use the Cloudflare Issuer).<p>&gt; * The Cloudflare Issuer generates a token, sends it to the browser, which in turn sends it to the origin.<p>&gt; * Cloudflare then receives the token, and uses it to determine that we don’t need to show this user a CAPTCHA. [...]<p>Sounds an awful lot like WAI to me, but at least it&#x27;s called a &quot;Privacy Access Tokens&quot; so it surely must be good...?<p>EDIT: turns out there was an HN thread about this a few days ago, I just missed it: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36862494">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=36862494</a>
评论 #36913618 未加载
评论 #36913452 未加载
评论 #36914829 未加载
评论 #36913092 未加载
jmclnx将近 2 年前
This is why I have started looking at gopher. And I just heard of gemini, which may be even of more interest to me.<p>Companies are doing all the can to create Walled Gardens after watching Apple&#x27;s success. And to a lesser extent seems Corporations are starting to influence the direction of Linux Development. I wonder when will have full embedded DRM, validating streaming sites.<p><a href="https:&#x2F;&#x2F;www.linuxjournal.com&#x2F;content&#x2F;diff-u-kernel-drm-support" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.linuxjournal.com&#x2F;content&#x2F;diff-u-kernel-drm-suppo...</a>
评论 #36912303 未加载
评论 #36911751 未加载
pelagicAustral将近 2 年前
I read this stuff and I feel super cynic about it. I feel like &quot;no way, not on my watch!&quot;, and then I realize that all I can do is sign a petition, or send an email to a representative that has zero fucking clue what this means... Same reason it does not matter to my zoomer brother its contemporaneous TikTokers.<p>People DO-NOT-GIVE-A-SHIT. Because there are bigger problems, like &quot;what the fuck am I going to pay the rent with tomorrow&quot;, and more entertaining spectacles, like watching a person pretend it&#x27;s an NPC for 5 hours straight and give them money for it.<p>And I feel a lot of the people I have worked with are the same type of individual, used to realizing they are getting screwed sideways, addicted to complaining, but only as long as it&#x27;s among a very select group of individuals sharing common interests.<p>It&#x27;s the most draining type of revolution. Nothing ever gets done, fucks are handed left and right: DNS, JS-fiasco, web neutrality, browserland... And we always just kick the buck and revisit the good &#x27;ol days on another thread further down the line, once no other rights are left be destroyed...<p>And yet, what am I going to do? reject the PR?
评论 #36910830 未加载
评论 #36911056 未加载
评论 #36910678 未加载
评论 #36910847 未加载
评论 #36910767 未加载
评论 #36910664 未加载
评论 #36910745 未加载
MrYellowP将近 2 年前
I&#x27;m glad there&#x27;s people who appreciate knowing about this. When I try to spread it, I&#x27;m mostly getting confronted with ignorance.<p>This really isn&#x27;t just Google. They apparently just want to be the first.<p>This is what the &quot;conspiracy theory&quot; about the digital lockdown (i call it that) is about. It&#x27;s one more step in that direction and from the looks of what this does, we&#x27;re getting too close to the destination.
nrdxp将近 2 年前
As if verifying that we are all using Google&#x27;s browser somehow makes us safer. Because they are such perfect coders over there. The level of arrogance at these big tech firms is astounding, and irritating.
user6723将近 2 年前
&quot;You can visit our website, please show your digital handcuffs&quot;
EVa5I7bHFq9mnYK将近 2 年前
Can someone ELI5 what will happen? Will Firefox stop working on most sites? Will ublock stop working? Will I have to send a retina scan before accessing world wide web sites?<p>Fine, I lived without Internet before ... installed Microsoft Flight Simulator from floppy disks. Will be a little more floppies this time, I guess. No big deal.
评论 #36912850 未加载
maverick74将近 2 年前
Nah!!!<p>Lets all use chromium-based browsers!<p>What could possibly go wrong?<p>XD
评论 #36913478 未加载
butz将近 2 年前
One more thing, some said that not letting DRM being added as standard led to Widevine being controlled by single entity. Does having standard might help prevent a lock-in?
评论 #36912847 未加载
pacifika将近 2 年前
Does this affect all sites with google ads, all sites on chrome or…?
评论 #36912073 未加载
user6723将近 2 年前
wei is a very bad idea, it will incite violence
lowbloodsugar将近 2 年前
Sure, I agree but I feel like nobody who doesn’t already agree is going to read that article and think “oh yeah this is bad”. It honestly sounds like a Trumpian rant on whatever his topic du jour is.
no_time将近 2 年前
They are a bit late to the party. Not even a blogpost from the FSF when the news around Pluton dropped for example.
评论 #36911216 未加载
评论 #36910775 未加载
评论 #36913070 未加载