this post was submitted on 12 Aug 2023
126 points (96.3% liked)

Programming

17398 readers
145 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]

founded 1 year ago
MODERATORS
snowe
Ategon
[email protected]
126
Web Environment Integrity: What's Going On? (openwebdefenders.org)
submitted 1 year ago by [email protected] to c/programming
39 comments fedilink hide all child comments
 

We (me with a friend) created this page https://openwebdefenders.org and planning to create banners for websites that may want to inform their users on what's going on.

If anyone wants to contribute somehow or have other ideas I would be happy to discuss on https://github.com/openwebdefenders/web/issues

you are viewing a single comment's thread
view the rest of the comments
[–] starman 54 points 1 year ago* (last edited 1 year ago) (3 children)

Do you use browsers other than the mainstream ones like Chrome or Firefox? Third-party browsers, especially those that prioritize privacy or offer unique features, might be labeled “untrusted,” limiting your browsing experience.

This suggests that firefox will be trusted, because it's mainstream, which is not true, because Mozilla won't implement WEI, and therefore malicious websites won't be able to verify "environment integrity"

Besides that, nice website and thanks for your efforts on fighting with WEI.

[–] Mikina 13 points 1 year ago* (last edited 1 year ago)

Mozilla won’t implement WEI

They are going to fight against WEI. Tooth and nails, for our sakes!

Just like they did with EME, the closed source video DRM in 2014. By being deeply concerned with the direction the web is going, and definitely against it, but...

We face a choice between a feature our users want and the degree to which that feature can be built to embody user control and privacy.

With most competing browsers and the content industry embracing the W3C EME specification, Mozilla has little choice but to implement EME as well so our users can continue to access all content they want to enjoy.

Despite our dislike of DRM, we have come to believe Firefox needs to provide a mechanism for people to watch DRM-controlled content.

DRM requires closed systems to operate as currently required and is designed to remove user control, so Mozilla is taking steps to find alternative solutions to DRM. But Mozilla also believes that until an alternative system is in place, Firefox users should be able to choose whether to interact with DRM in order to watch streaming videos in the browser.

https://blog.mozilla.org/en/mozilla/drm-and-the-challenge-of-serving-users/

https://hacks.mozilla.org/2014/05/reconciling-mozillas-mission-and-w3c-eme/

[–] [email protected] 10 points 1 year ago (2 children)

I'd also argue Firefox is hardly mainstream at ~3% usage. Edge would be a better replacement given it comes with every Windows install (and many corporate environments don't allow using an alternative).

[–] [email protected] 9 points 1 year ago* (last edited 1 year ago) (1 children)

It is only used by 3%!? Wasn't it at around 30% some years ago (not counting netscape)? This comes really as a surprise to me because in my circles even around half of non-tech inclined windows users use firefox.

Why did it lose so many users?

[–] sip 1 points 1 year ago

google pr

[–] sip 3 points 1 year ago (1 children)

edge is chrome

[–] colorado 8 points 1 year ago (3 children)

I am not convinced Mozilla will refuse to implement WEI when push comes to shove. Mozilla already supports Netflix playback with drm, right?

[–] [email protected] 7 points 1 year ago (1 children)

But isn’t it quite the jump from mozilla accepting drm from a service in an indistry that has invented drm to them accepting a blanket drm for the web? I think it’s kind of not guilty until proven for mozilla. They have so far (to my knowledge) not done anything very anti consumer.

[–] colorado 1 points 1 year ago (1 children)

I'm just saying we can't just trust Mozilla leadership will do the right thing...

[–] [email protected] 2 points 1 year ago (1 children)

Nah, I say we don’t run around villainizing everyone and stay with thos who fucked us over in the past. Otherwise we can trust exactly no one.

[–] colorado 1 points 1 year ago

That's exactly right. Don't blindly trust anyone. Hold them accountable.

[–] starman 6 points 1 year ago (1 children)

Take a look at this

[–] colorado 1 points 1 year ago

I am glad to be proven wrong. Thank you for the link.

[–] sip 2 points 1 year ago

web is not movies and tv shows.