Re:/e/OS is a complete "deGoogled", mobile ecosystem
by vovavili on Monday March 02, 2026 @09:41AM
(#47218539)
Extensions prior to MV3 were notoriously insecure and granted extension developers a very wide attack surface. Assuming that Google only has a sinister reason to switch to a better standard in an ecosystem riddled with ill-intentioned actors is a bit too cynical.
[ Parent
| on HN ]
Re:/e/OS is a complete "deGoogled", mobile ecosystem
by wavemode on Monday March 02, 2026 @12:03PM
(#47220706)
> very wide attack surface.
Do you have details of specific realistic attacks that were possible under MV2 and now impossible under MV3?
Re:/e/OS is a complete "deGoogled", mobile ecosystem
by vovavili on Monday March 02, 2026 @12:22PM
(#47220985)
A very quick Google search could have done the trick for you - https://developer.chrome.com/docs/extensions/develop/migrate...
Re:/e/OS is a complete "deGoogled", mobile ecosystem
by wavemode on Monday March 02, 2026 @07:27PM
(#47226253)
That page contains a list of things you aren't allowed to do in MV3 anymore. There's no explanation of attacks being prevented.
In what specific ways are you safer when installing a malicious MV3 extension compared to installing a malicious MV2 extension?
Re:/e/OS is a complete "deGoogled", mobile ecosystem
by bornfreddy on Monday March 02, 2026 @11:56AM
(#47220577)
No, it's not. They could easily have solved the problems without introducing changes to cripple ad blockers, but they decided their investors need some more cash. Actions speak.
Re:/e/OS is a complete "deGoogled", mobile ecosystem
by OsrsNeedsf2P on Monday March 02, 2026 @11:43AM
(#47220387)
Google will only ever push major updates that are neutral or beneficial to their ad revenue. I do not believe they killed MV3 due to ad blockers, but it's the type of proposal that can survive at Google.