News for hackers. Stuff that matters.
Re:Brave browser can inject headers in HTTP requests by krapp on Sunday February 10, 2019 @06:21PM (#19130800)
Internet users are entitled to all resources returned to their user agent by a request.

I know businesses want to pretend the web works like television, or radio, or newspapers, but it doesn't.

Whatever a site sends me as a response to a request is mine. It's mine. The transaction is completed, the response belongs to me and I can do whatever I want with it. I can not run the javascript. I can run my own javascript. I can mess with the HTML and CSS. I can choose not to view the ads. Hell, Brave is based on and works on this premise, it injects its own ads. They can do that. I can do that. I have no reason to do that, but I could.

That's the way the web works, has always worked, and will always work. And it's the reason ads on the internet were doomed from the start. The only reason they worked, at all, to begin with is that the public wasn't aware that ad blocking was possible, and browsers weren't capable of it, but the underlying capability was always there, it was always implicit to the way the request/response model of the web worked.

The only group acting entitled are businesses. They feel entitled to more control over the end user's experience than they have. If they want that kind of control, they can put up a paywall. Or go back to old media. Or accept the true nature of the field they're playing on, that they cannot have complete control over the end state of their content on the web. They cannot force the end user to endure their advertising if they don't want to.

Re:Brave browser can inject headers in HTTP requests by fouric on Sunday February 10, 2019 @06:46PM (#19130911)
> Internet users are entitled to all resources returned to their user agent by a request.

This is legally false. If a digital artist creates a painting and puts it up on their website, and you go view it, it does not become yours. The artist retains the copyright to the work, and not only is it illegal for you to then sell prints of it, but a violation of ethics, to boot.

Re:Brave browser can inject headers in HTTP requests by krapp on Sunday February 10, 2019 @07:02PM (#19131009)
>If a digital artist creates a painting and puts it up on their website, and you go view it, it does not become yours.

Of course the image is mine, just as an image of the painting in a newspaper or brochure would be mine, it's a copy freely distributed by the copyright owner. I'm perfectly within my legal rights to do whatever I want with it, within the confines of the browser.

I'm not claiming i have the right to sell it or anything, but I absolutely do have the right to decide whether or not it shows up.

Re:Brave browser can inject headers in HTTP requests by 51lver on Sunday February 10, 2019 @08:28PM (#19131405)
Actually you have a lot more rights than that. Your rights stop when you want to distribute unmodified or derivative works without authorization. Nothing is stopping you from remixing ANYTHING* if you have no intent to distribute it.

*if it was legally acquired. Remixing illegal stuff would still be possession of illegal stuff.

Re:Brave browser can inject headers in HTTP requests by krageon on Monday February 11, 2019 @03:32AM (#19132866)
Please stop abusing "ethics" to force your own moral framework on other people. This isn't what it is, and on top of that (given that it's different for everyone) if you need to say it the reader already knows you are wrong.
Re:Brave browser can inject headers in HTTP requests by krapp on Monday February 11, 2019 @05:20AM (#19133335)
When did I mention "ethics" or any moral framework?

It's simply a matter of common sense, legal precedent and the way HTTP works.

To claim otherwise would mean companies have the right to force me not to alter the content of their responses in my browser, in order to guarantee their ads are viewed. If this were true, all browsers and many plugins would already be illegal, as would ad blockers, whose legality has been confirmed in multiple court cases.

Ethics and morality don't enter into the discussion. If I want to support a site by viewing their ads, I can. If I don't, I don't have to. The choice is mine to make. Sites depending on ad revenue, meanwhile, can try as hard as they want to convince me to choose to view their ads, but they have no legal right, nor technical ability to make me, as long as we're talking about content that can be filtered out of an HTTP response by a browser I control.

Re:Brave browser can inject headers in HTTP requests by krageon on Monday February 11, 2019 @05:54AM (#19133513)
I think you mistook the ancestry of my comment.
Re:Brave browser can inject headers in HTTP requests by krapp on Monday February 11, 2019 @06:00AM (#19133541)
looks like you're right - my mistake.