News for hackers. Stuff that matters.
Re:Bypassing Google's big anti-adblock update by Etheryte on Saturday July 12, 2025 @05:16PM (#44545238)
I don't know, I switched to Safari and it was painful for like two hours and then I stopped thinking about it. The only thing I somewhat miss is the built-in page translate, but I don't need it often enough to be bothered much.
Re:Bypassing Google's big anti-adblock update by notatoad on Saturday July 12, 2025 @06:03PM (#44545577)
switching to safari because chrome disabled the good adblockers is completely counter-productive. safari has never supported the good adblockers.
Re:Bypassing Google's big anti-adblock update by Fire-Dragon-DoL on Saturday July 12, 2025 @05:18PM (#44545267)
I find switching from chrome to safari essentially doing nothing. If you switched to a non-big-company owned browser, it would make sense but Apple has plenty of lock in which is as bad as chrome lock in.
Re:Bypassing Google's big anti-adblock update by creato on Saturday July 12, 2025 @06:03PM (#44545579)
It's especially silly in this case because Safari extensions have always been equivalent to MV3 functionality.
Re:Bypassing Google's big anti-adblock update by lapcat on Saturday July 12, 2025 @06:31PM (#44545735)
This is not accurate. Safari had webRequestBlocking functionality from 2010 to 2019 and indeed a version of uBlock Origin for Safari. What is true is that Safari was the first browser to ditch webRequestBlocking, replaced by its Apple-specific static rule content blocker API.

Otherwise, though, Safari still supports MV2. Everyone seems to think webRequestBlocking is the only relevant change in MV3, but it's not. Equally important IMO is arbitrary JavaScript injection into web pages, which MV2 allows but MV3 does not.

MV3 is so locked down that you can't even use String.replace() with a constructed JavaScript function. It's really a nightmare.

Google's excuse is that all JavaScript needs to be statically declared in the extension so that the Chrome Web Store can review it. But then the Chrome Web Store allows a bunch of malware to be published anyway!

Re:Bypassing Google's big anti-adblock update by rasz on Sunday July 13, 2025 @12:11AM (#44547423)
There must be ways of injecting custom non static js because mv3 version of tampermonkey works https://chromewebstore.google.com/detail/tampermonkey/dhdgff...
Re:Bypassing Google's big anti-adblock update by lapcat on Sunday July 13, 2025 @07:44AM (#44549596)
After dragging their feet for literally years, Google finally implemented a specific userscripts API. However, the implementation was initially just statically declared rules like DeclarativeNetRequest, which sucked, and it also required that the user enable developer mode.

In Chrome 135, which is very recent—the public is currently on Chrome 138—Google added an execute() method to run an individual script. However, the API is not available from the extension content script, so if it needs to be triggered from the content script, you have to make an async call to the background script (or more accurately, the background service worker, which is a whole other nightmare of MV3). Moreover, the API accepts only a string for JS code or a filename; you still can't use a Function() constructor for example.

In Chrome 138, the current version, Google switched from developer mode to a dedicated userscripts permission toggle in the extension details, which is disabled by default. I think Google is still working on but has not finished a permissions request API. Remember this is almost SEVEN YEARS after Google first announced Manifest V3. The entire time, Google has been stalling, foot dragging, practically getting dragged kicking and screaming into doing the least possible work here.

Re:Bypassing Google's big anti-adblock update by rasz on Sunday July 13, 2025 @05:36PM (#44553959)
Iv been following https://github.com/Tampermonkey/tampermonkey/issues/644 since 2020. I remember a moment in 2021 where Google came out with this ridiculous notion of User code stored on User computer and executed by User Agent being "remote" because it wasnt under Google control, but somewhere around 2022 things started clearing up and Jan Biniok managed to get a working mv3 version a year ago in May.

Surprisingly this async serialize/deserialize nature of the API (https://github.com/Tampermonkey/tampermonkey/blob/cdfc253c07... ?) somehow still manages to inject and execute scripts fast enough to make them act like content scripts at document_start. The only problem is no arbitration between extensions, cant force Tampermonkey inject before uBO (tons of adblock filters disable functions required for Tampermonkey and effectively kill Tampermonkey in the process).

Re:Bypassing Google's big anti-adblock update by fny on Saturday July 12, 2025 @05:23PM (#44545301)
I'm a huge fan of Orion by Kagi: you should have a look! It's a little rough around the edges but the extension support on iOS is amazing.
Re:Bypassing Google's big anti-adblock update by const_cast on Saturday July 12, 2025 @05:51PM (#44545494)
Orion is the only viable option on iOS IMO. The fact that, to this day, Safari has no way to block ads on iOS means it's just awful. Before Orion, I avoided using my web browser like the plague, because the experience was just bad.

Now I'm on Android, and Ironfox is pretty good and Firefox is also available. The browser story on Android is leaps and bounds ahead of iOS.

Re:Bypassing Google's big anti-adblock update by tech234a on Saturday July 12, 2025 @06:01PM (#44545560)
Actually there are several adblockers available for Safari on iOS; the functionality was introduced in 2015. Adblock Plus and Adguard are some of the larger extensions available, and now uBlock Origin Lite is now being beta tested for Safari on iOS.
Re:Bypassing Google's big anti-adblock update by ndiddy on Saturday July 12, 2025 @07:00PM (#44545930)
I find the "switch to Safari" talk amusing because the adblockers available for Safari are functionally equivalent to the MV3 API that everyone's complaining about. The problem with the "static list of content to block" approach that Safari and MV3 use is that you can't trick the site into thinking that ads have been loaded when they haven't, like MV2 allows via Javascript injection. The effect of this is that you'll run into a lot of "disable your ad blocker to continue" pop-ups when using an adblocker with Safari, while you won't see them at all when using an adblocker with Firefox.
Re:Bypassing Google's big anti-adblock update by lapcat on Saturday July 12, 2025 @07:45PM (#44546209)
A Safari content blocker can be combined with an MV2 Safari extension in one app for JavaScript injection.
Re:Bypassing Google's big anti-adblock update by ndiddy on Sunday July 13, 2025 @10:01AM (#44550522)
Thank you for the correction, it looks like Adguard uses this approach.
Re:Bypassing Google's big anti-adblock update by carlosjobim on Sunday July 13, 2025 @08:15PM (#44555045)
I never see these popups in Safari, so I think theory and practice is not the same.
Re:Bypassing Google's big anti-adblock update by const_cast on Saturday July 12, 2025 @06:12PM (#44545637)
I've never used these, but if I had to guess: these probably don't have the same power as full Manifest V2 extensions.

Also names like "Adblock Plus" scare me. I don't want someone I don't trust getting my web activity.

Re:Bypassing Google's big anti-adblock update by Etheryte on Sunday July 13, 2025 @10:35AM (#44550742)
You don't have to guess, they're as capable as MV2 and AdGuard has been around for a long time.
Re:Bypassing Google's big anti-adblock update by const_cast on Sunday July 13, 2025 @09:16PM (#44555448)
A quick Google search reveals AdGuard is only a DNS resolver, so it has the adblocking power of something like a Pi Hole. So... nowhere near as capable. It can't inject JS into webpages to prevent pop ups, which is going to lead to white boxes everywhere. In addition, ads can obfuscate the URL or share domains with non-ad content - so that content won't be blocked with a DNS resolver.

However, the software seems safe. Their privacy policy says they only store websites locally, and never upload them to servers. The app is also open-source.

Ad Block Plus is not privacy respecting. They collect usage data as well as unique device identifiers.

Re:Bypassing Google's big anti-adblock update by Fire-Dragon-DoL on Saturday July 12, 2025 @06:09PM (#44545621)
I don't use any Apple product, so no Orion for me
Re:Bypassing Google's big anti-adblock update by zer00eyz on Saturday July 12, 2025 @07:02PM (#44545945)
I don't think in this case your argument is as clear cut and the use cases that people have today arent solved by the choices out there.

George Carlin: "You don't need a formal conspiracy when interests converge. These people went to the same universities, they're on the same boards of directors, they're in the same country clubs, they have like interests, they don't need to call a meeting, they know what's good for them and they're getting it."

The interests of APPLE (who makes money on hardware, and credit card processing) don't align with the interests of Google (who makes money on ad's). I am all for open source, I'm all for alternatives. But honestly if you own an iPhone and a Mac then safari makes a lot of sense. I happen to use safari and Firefox on Mac and am happy to bounce back and forth.

I also keep an eye on ladybird, but it isnt ready for prime time.

And I'm still going to have a chrome install for easy flashing of devices.

Re:Bypassing Google's big anti-adblock update by vehemenz on Saturday July 12, 2025 @05:24PM (#44545310)
Apple isn’t selling my data, and they make the best consumer hardware, so at this point there aren’t many downsides to Apple lock in.
Re:Bypassing Google's big anti-adblock update by sensanaty on Saturday July 12, 2025 @05:34PM (#44545384)
> Apple isn’t selling my data

Sorry to break it to you, but yes, they are.

https://ads.apple.com/

Re:Bypassing Google's big anti-adblock update by jampekka on Saturday July 12, 2025 @06:39PM (#44545793)
The greatest trick the Ad ever pulled was convincing the world it didn't exist.
Re:Bypassing Google's big anti-adblock update by scarface_74 on Saturday July 12, 2025 @05:38PM (#44545405)
No company sells your data. They sell access to you based on the data they have about you. Apple is no different
Re:Bypassing Google's big anti-adblock update by 0xblinq on Sunday July 13, 2025 @02:03AM (#44547887)
Facebook entered the chat
Re:Bypassing Google's big anti-adblock update by scarface_74 on Sunday July 13, 2025 @04:46AM (#44548649)
Facebook doesn’t sell your data to other companies either. Your data is too valuable to sell. Companies tell FB what demographics they want to target.
Re:Bypassing Google's big anti-adblock update by Fire-Dragon-DoL on Saturday July 12, 2025 @06:09PM (#44545625)
The lock in is a downside.
Re:Bypassing Google's big anti-adblock update by mattkevan on Saturday July 12, 2025 @05:25PM (#44545318)
Safari has had built-in page translate for years now. It’ll detect different languages and show a translate option in the site tools menu. Works well.
Re:Bypassing Google's big anti-adblock update by Etheryte on Saturday July 12, 2025 @05:40PM (#44545428)
I'm aware of this, but in my experience it's pretty bad. It doesn't even cover all European languages, never mind the rest of the world. For the languages it does support, it's always a lottery whether it works with that specific site or not. I've tried using it a few times, but it's not even remotely close to what Chrome does.