Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The problem at this point isn't whether chrome will disable it... It can be added back, probably fairly easily as google intents to keep it around for "enterprise" anyway, so it's probably just gonna end up changing/removing one if-statement. If not, then the code already exists and has to be merged back in.

The problem is distribution of the actual extensions, as Vivaldi kinda pointed out, as the other browsers mostly rely on the Chrome Extension store. If Google really decides to pull the plug here they could start rejecting extensions using the old, removed-from-Chrome APIs. And then what? Each browser such as Vivaldi, Brave, Opera has to implement their own app store just to host the old-API ad-blockers. And implementing such a store is a major feat. And the walled garden strikes again.

Vivaldi already indicated they might create a "limited" store, meaning not a real store open to the public, but one where they list hand-picked old-API extensions such as ublock origin. Of course, innovation is still stiffed as you in such a "chrome-store + limited vendor store" scenario cannot just develop new extensions using the old-API because you'd have no chance of getting listed in the chrome store, and essentially no chance in the hand-picked limited vendor ones.



Since Firefox support WebExtensions now (or will soon get it) which are very close to Chrome extensions, it wouldn't be unthinkable for all non-Chrome browsers to use Firefox store instead of the Chrome one. I think Mozilla could even be convinced to open it up as an "open web extensions" store or collaborate with others to build a new one. They certainly have the infrastructure and experience to run one.


Mozilla supports WebExtensions since 57+ afaik. Not sure about this if there are some differences in implementation and API's between Firefox's WebExt and Chrome's.


MDN has a page documenting differences in API support between major WebExtension browsers:

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...


Uh, Firefox already supports WebExtensions and it is like common knowledge. Mozilla barely has the experience to run a sync service, and even that is a disaster.


I don't think Firefox Sync is a disaster. In fact, it's the opposite. They managed to handle the service pretty well.


not originally. when sync first came out, and for a while after, it was a dumpster fire.

that being said, it is load better now.


Why wouldn't the other vendors band together and make a single, non-Google chromium extensions repository? If anyone from Microsoft is reading, this would be an excellent opportunity to give Edge a leg up on Chrome.


As an example - app stores for android. Each manufacturer makes it's own and for years they are unable to cooperate.


It is funny, on the paper I should love this idea but as an app developer the last thing I want is more code coming through the OEMs.

Sadly Google is essential in keeping their shitty hacks at bay.


I suppose an extension is easier but as browsers can be told to go through proxies, an extension isn't necessary for adblocking. A 2nd process on the machine, a change to the browser (set localhost and a port) and you're done. Someone did something similar and called it Dan's Guardian IIRC, but that's all it was.

That's how I run mine, a local (and very ancient) version of squid blocks everything. It won't be as flexible but it works.


Popular ad blockers have features like dynamic heuristic based blocking, right-click to block element, one click whitelist, etc.


That doesn't work as well for https connections where you can only block on domain name, for which any DNS/VPN-based blocking works just as well.


Usually proxying can work for https connections - by letting the proxy terminate ssl. But then you really need to trust the proxy's ssl implementation, and it probably also breaks standard security ui like viewing the cert.

Definitely it has its problems.


The SSL implementation is the least of your problems. You’d need to have a private CA on your system that creates certificates on the fly. How do you secure that proper. You’d also have problems when reporting SSL errors between the site and the proxy to the browser because from the browsers PoV, the connection looks good.


I don't think so, AIUI. The page is decrypted by squid to serve it, so security is irrelevant.

Also it can match on regular expressions <http://www.squidguard.org/Doc/expressionlist.html>

If I'm wrong about the first point, please clarify. Web/HTTP is really not my area so maybe squid receives and passes stuff through entirely as a blob, if https is used.

Edit. What dgoldstein0 wrote suggests I do misunderstand.


This is an excellent opportunity for Microsoft to distinguish their Chromium-based Edge from Chrome. Leave the webRequest API intact, ensure that these adblocking extensions are available from their own store, and invite other Chromium-based browsers to use their store instead of Google's.


This would be a very funny inversion!

2004: M$ is so greedy, Google is so pro-user.

2019: Google is so greedy, MS is so pro-user.


My gut feeling is that Google won't pull this stunt with chrome, this is some kind of scare mongering or a PR tactic, I dunno.

It doesn't make a logical sense because if they are banning the ad-blockers, it means they accept that chrome is largely used by power users who can install these blockers (otherwise, what's the need?). But they should realize that a power user who installs an addon can just as easily move to another browser like firefox/brave. And the PR repercussions will ensure that a lot of newbies will leave too (because they usually follow the power users on youtube) which will essentially kill the advertising income that they wanted in the first place?


I think its gotten to the point where power users go around to all their non-power-user friends and install ad blockers for them, at least I do in our office. The reason this is so successful is because it takes 5 seconds to go the the chrome store and add ublock origin. Convincing my non-power-user friends to move to firefox would be significantly harder. Google's goal is to remove the severity (and effectively the ease) of ad blocking for non-power-users.


This had been happening for a decade or more based on anecdotal evidence - so much so that I had to double-check then change my intranet app at a previous smaller company (2008).

The new thing is Google valuing their profits over the wishes of a large population of their users.


This hits the nail on the head.

This is how big companies lose their way and get eaten by smaller companies. We all think Google is invincible because of their technological monopoly, but the problem of having to grow forever due to the way public markets work necessitates product evolution or squeezing blood from the stone. The real monopoly is philosophy, not technology, and it's so, so, so easy to lose the logos/pathos/eros high ground (and thus the philosophical war).

In Google's case, their innovation has never been able to eclipse their original sin: advertising. As long as your god is ads, you will make compromised product decisions that are not in alignment with your users. This is part of why I actually hope FB's currency takes off because maybe they can stop worshipping at the altar of click revenue.

Who am I kidding, it's just another revenue line-item on the 10K.


...logos/pathos/eros...

Did you perhaps mean ethos?


I tend to think of ethics as a subset of logic with a side of pathology, whereas love (eros) is a singular category.

I guess if I had to really sort it, I would only talk about love and power, in that order, but I think it's more addressable to speak in language people already kinda get.

But no, I specifically meant eros, not ethos.


How is Firefox any different in that regard?

It's exactly the same, go to the Firefox add-on store and install uBLock Origin.


I may be poorly informed, but why is firefox difficult? I switched a year ago and haven’t really noticed anything different...


It's difficult because the icon looks different and the look-and-feel is minimally different. Nothing of substance but people "dun wanna".


GP wasn't saying Firefox is difficult. GP gave a specific example of how it's easy to install an ad blocker on a system that's already running Chrome for someone else; no need to convince them to change browser, no need to tell them to double-click a different icon.


> it means they accept that chrome is largely used by power users who can install these

You're making a very big assumption here. Last I checked people who blocked ads counted in the hundreds of millions and the number was growing rapidly.

Some old stats I found with a quick search:

https://pagefair.com/blog/2017/adblockreport/

> 615 million devices now use adblock

11% of the global internet population is blocking ads on the web

Adblock usage grew 30% globally in 2016

Mobile adblock usage grew by 108 million to reach 380 million devices

Desktop adblock usage grew by 34 million to reach 236 million devices


Chrome isn't "largely used by power users", it's used by 60+% of all web users[1] which means it's largely used by nontechnical users. Power users will block ads somehow, whether by changing fork or changing browser or running a PiHole.

However, over 300 million users run adblockers[2][3] and it's probably a fair assumption that most of those users are relatively nontechnical and only run them because they're very easy to install.

I think this push is just to add a tiny bit of friction into the process so that 'casual' adblockers stop bothering.

[1] https://en.wikipedia.org/wiki/Usage_share_of_web_browsers#Su...

[2] https://whybytes.com/ublock-origin-vs-adblock-plus/477/

[3] https://en.wikipedia.org/wiki/UBlock_Origin


Maybe think about it in a different way. Right now, there is a kill-switch within googles primary product that could essentially destroy their business model.

This is not about google wanting to harm the current power users. It is probably the idea that someone could come along and destroy their business.

If such an extensions goes mainstream that could seriously harm them.

They may also want to get rid of paying Adblock Plus money for their highway robbery.

Now that I think about it, getting rid of ABP may be the primary reason for this move. They have to basically pay a third party to get access to their own users.

Either way, the battle is not over the power user minority, but over the average user.

The idea is to make the API just powerful enough for the most annoying ads to disappear. Most users would probably be content with this. They will probably make it so they won't lose all of their power users. I think what they really want is increasing the amount of works it takes to have full adblocking functionality to the point where the average user has no access to it.


> getting rid of ABP may be the primary reason for this move

This makes no sense to me.

ABP is already publishing a version using a declarativeNetRequest-like API, it's in the Mac App Store[1], so clearly it's not going to "get rid of ABP".

Google benefits from ABP and AdBlock[2] being the most used content blockers, as they do not block Google ads by default, and do not block trackers/data miners out of the box.

If Google (rightly) deems content blockers as unavoidable, it sure would want people to install the ones which are not blocking its ads and trackers by default.

* * *

[1] https://itunes.apple.com/us/app/adblock-plus-for-safari/id14...

[2] The two most-used content blockers as per Chrome Web Store.


Maybe it's just me, I use ABP and I'm fine with it. I don't mind adds in general .. I mind annoying and experience breaking adds.

If I land on some page where annoying adds still get past ABP I close and never visit the page again.


You are probably right, although a low number of rules will also affect them as their acceptable ads program is based on the fact that they block everything else. I still wonder if they can continue to offer that program with 30,000 rules only. My idea that they target ABP came from their arbitrary 30,000 rules limit.

As I have written elsewhere I consider ABP and AdBlock as "infiltrated" by Google, so they definitely want to see the rigorous blockers disappear first. Should have made that clearer in the comment.


The Safari version supports "Acceptable Ads". I counted ~17,000 rules[1] which includes exception rules. Also, keep in mind cosmetic exception filters are not implemented through the declarativeNetRequest API.

(Edited for accuracy regarding rule count)

* * *

[1] https://gitlab.com/eyeo/adblockplus/adblockplussafarimacos/t...


It's been my assumption that with a little bit of scripting, EasyList could be pruned to land within the 30K without too much trouble. As you have more experience in this fields though, do you have any thoughts on how viable this approach would be, and if the 30K limit will be a problem in the end?


Doesn't any finite length list that is only able to be updated when the addon is updated mean ad networks can use a random string with more combinations than the size of list to defeat all ad blocking?


Yes, that seems plausible.


Wow, ok that means 30,000 definitely won't be an existential threat for them.


ABP is compatible with the new API and will not be affected.

See: https://developer.chrome.com/extensions/declarativeNetReques...

This is API that ABP can use. But with the new API the rules list will be limited to 30 000 rules vs. for example 42 000 EasyList is using, and an update to the rules will require a full update of the plugin.

See also comments from gorhill: https://github.com/uBlockOrigin/uBlock-issues/issues/338#iss...


ABP released a statement to german news site golem.de, saying that they "prepare for the worst case".

This means they anticipate Google to target the Acceptable Ads program.

Originally I thought 30,000 rules wouldn't be enough to cover things, but according to this research, only a couple hundred rules are enough to block >90% of the ads: https://brave.com/the-mounting-cost-of-stale-ad-blocking-rul...

So maybe there's another limiting aspect of the declarativeNetRequest API I don't know of.


90% of the ads right now, but its trivial to design adtech so its only possible to block a tiny percentage of everything with only 50k rules.

(register 50k domains, use 50k different subpath/subdomains and mix content+ads on something like youtube where you cant wholesale block youtube, etc)


You do link the comments, so just to point out "will not be affected" isn't true for many reasons...not just the reduced ruleset. Details are in those comments. It will be a lesser product all around.


>ABP is compatible with the new API and will not be affected.

Thats just false. Every adblocker using webrequest will be affected, including ABP.


The idea is to make the API just powerful enough for the most annoying ads to disappear.

In other words, to block ads on third party networks but leave Google ads alone. That's a bold move these days, when antitrust regulators are putting big tech under the microscope.


yes, thats probably the plan.

well, anti-trust these days is just a buzzword, in a legal sense it is defined in a very strict way, and the cost for companies to anticipate an anti-trust ruling is way higher than just pushing their own interests.

With 66% market share and countless other browsers available, the only question for antitrust when it comes to browsers is if users have equal access to browsers, not whether google supports ad blocking.

I think they will make sure that the ad blocking capability does not explicicly favor google ads.


>countless other browsers available

You know that's wrong. There's Chrome, Safari, and Firefox that support most things and which most people actually use; Internet Explorer is dead and Edge is becoming Chromium; and Brave, Midori, and Vivaldi are also Chromium.

There's also Lynx, Links, w3m, Dillo, and Netsurf, but very few people use those and ad-blocking isn't much of a concern there, because they don't enable JavaScript necessary.


There are around 10 more prominent browsers and lots of smaller forks, which is enough choice in the context of anti-trust.


>It doesn't make a logical sense because if they are banning the ad-blockers...

To be clear, you can still block ads under Manifest v3. I don't know where this idea that you suddenly won't be able to block ads came from, but somebody is being dishonest about it.


Ad blocking capabilities are limited and there's no API to implement advanced rules like media size limiting. For example manifest v3 has no way to implement the full EasyList.


That's true on both counts, but less of a concern than you might be thinking. EasyList can be slimmed down significantly without losing any blocking. Media size limiting is a more interesting use case, but probably not why most installed adblockers in the first place.


Given that Firefox has now also moved to using WebExtensions, the Chromium forks could just rely on http://addons.mozilla.org as their “store.”


Firefox add-ons have a different namespace and some additional APIs that Blink does not support. See https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web... and https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...


And Firefox add-ons return promises instead of taking callbacks like Chrome.


Opera does not use chrome web store: https://addons.opera.com/en/extensions/


They do have their own store. However, Opera's add-on store is not a great experience. I'm not sure what's going on there, but I know of at least one company where they submitted a new extension to that store it took them around 6 months(!!!) to approve it.

It was easier to self-host the add-on for people who want it, so that they can download it from your website.


The problem you described actually happened with Firefox and Firefox forks not too long ago. Mozilla kicked out all traditional Firefox add-ons from their repository to "replace" them (note: they didn't actually replace the vast majority) with chrome style webextensions. Firefox forks were forced to implement and run their own add-on hosting system and API, and navigate the complex legal waters of re-hosting the add-ons if they wished to continue having access. One notable example of this is the Pale Moon browser. But it all turned out all right. The PM add-on "store" works great and is reliable.

It's not beyond the capabilities of efforts like Vivaldi or Brave to do the same as the Pale Moon team.


And how many add-ons are updated and maintained specifically for Pale Moon - especially compared to the number of add-ons for Firefox for which that is the case?

Because that is the danger for the Chromium forks too - that nobody will bother with their forked store.


Ironically Firefox killed their extension API to be compatible with Chrome's extensions. Now they probably don't want to be compatible with the new Chrome API.


> Ironically Firefox killed their extension API to be compatible with Chrome's extensions.

This is misleading. They deprecated the old API primarily to be able to do multi-process and get rid of XUL.


As well as to expose a stable extension API (no more XUL extensions breaking randomly on every browser update) and to enforce any sort of security boundary/permissions system.


Note that this was done after two prior failed attempts to rewrite the CSS engine for multithread in C++: https://hacks.mozilla.org/2019/02/rewriting-a-browser-compon...

Its sad to lose DownThemAll and the plethora of othwr XUL extensions, but having performant multicore support is critical given the shift to having many cores (as single thread performance improvements become uncommon).


Which honestly makes sense. Komodo is one of my favourite editors, but Christ working with XUL is painful!


> get rid of XUL

XUL is still used by the browser itself.


I recently used the webRequest API in Firefox and it is already more robust than the Chrome equivalent. For example, you can write stream filters to process request responses. No so in Chrome, where you have no such capability.


yeah this commitment inspires little long term confidence since the ecosystem is heavily chrome-centric

I've already moved everything to Firefox to test out waters before moving all my relatives.


Each browser such as Vivaldi, Brave, Opera has to implement their own app store just to host the old-API ad-blockers. And implementing such a store is a major feat. And the walled garden strikes again.

How about "app store as a service?"


They should team up for the good of all, and create a communally owned fork of Chromium that they all contribute to, and a marketplace. That way the ensure their ecosystem can thrive outside of Google's kingdom.


Isn’t one of Brave’s main selling points that it itself is an ad blocker and doesn’t require a third party extension? Something about removing ads from pages before they even make http requests.


You can install extensions manually. You have to be able to because otherwise you wouldn't be able to develop new ones.


Walled gardens for extensions is also a big problem. Maybe web browsers will finally be forced to give up that control because of all this. Personally I would like at least user freedom to choose extension stores for themselves.


Business-wise, I would love to own an app store, and exercise control, and (eventually) cut myself in as the middleperson on for-pay software sold through it, as well as paid placements and ads.


All of the other browsers shouldn’t worry about store nonsense, just ship u-block by default and enabled. Fight fire with fire.


The reason that no browser does this is because that's the easiest way to go from "some sites are broken in this browser because no webdevs care to test with it" to "many sites are broken in this browser because webdevs deliberately go out of their way to break it". It's the nuclear option that a browser like Firefox would only go for (in the climate of the current web) if things got truly desperate for them. It's why, for example, Firefox didn't start blocking third-party cookies until Safari did it first: it gave them political cover to do so (and Safari can do whatever it wants because it's the only game in town on iOS).


I hadn't considered the ramifications to extension distribution. If Google's Chrome extension store chooses to not host extensions that use the webRequest API, other Chromium-based browsers will need to maintain their own extension stores or users will start installing unvetted extensions from shady third-party websites.


Opera blocks ads wihout the need of an extension. It's just a setting.


Well internally it shows as an extension, you can check yourself. Didn't use to, but does now.


You are right, but my point was that the feature doesn't depend on the Chrome extensions store.


i used opera for a while, and, while i liked it, it had a glaring bug in Windows 10 that jist didnt go away in the year or so i was using it.

that being said ...opera already has their own extensions store.


Brave has it's own ad blocking builtin.


We need a third party extensions store.


We need companies to stop promoting the Blink monoculture and helping Google pull stuns like this as a result.

These companies helping Mozilla getting Servo into shape would be a really good idea, which is why they won't do it.


I know of at least one, F-droid.


opera already had its own app store




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: