News for hackers. Stuff that matters.
Re:“Web Environment Integrity” is an all-out attack on the f... by wmf on Friday July 28, 2023 @04:47PM (#36913092)
I think the difference is that PAT allows ad blockers but WEI won't.
Re:“Web Environment Integrity” is an all-out attack on the f... by schoen on Friday July 28, 2023 @04:49PM (#36913119)
Does the PAT implementation still require that the page content is being rendered live to a human user, or not exported or something?

(I know web APIs can't directly prevent those things, but they might be able to let a site determine whether a user is doing something to prevent CSS or Javascript tricks from preventing them.)

Re:“Web Environment Integrity” is an all-out attack on the f... by gigel82 on Friday July 28, 2023 @04:56PM (#36913205)
PAT and WEI can allow and disallow whatever the hell they want, there's nothing preventing WEI from allowing ad blockers just like there's nothing preventing PATs from disallowing them. They are exactly the same technology (remote attestation, entirely outside of the user's control).