this post was submitted on 03 Nov 2024
155 points (100.0% liked)

Cybersecurity

5687 readers
45 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 1 year ago
MODERATORS
top 19 comments
sorted by: hot top controversial new old
[–] [email protected] 94 points 2 weeks ago (1 children)

"BuT mAnIfEsT v3 wIlL pRoTeCt UsErS fRoM mAlIcIoUs ExTeNsIoNs."

[–] notprogrammer 74 points 2 weeks ago (1 children)

MV3 is clearly an adblocker sabotage op by Google, it shouldn't even be disputed at this point. The sooner people understand this the better.

[–] [email protected] 22 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

Everything google does at this point is to squeeze pennies from their revenue streams. They have become destiny manifested for enshittification.

[–] [email protected] 5 points 1 week ago

Similar for Facebook, Microsoft etc. It will be interesting to see how long before they start to lose market dominance, or how anti trust laws work worldwide.

[–] [email protected] 30 points 2 weeks ago

A Chrome extension titled “Hide YouTube Shorts,” used by 100,000 people, was recently discovered to secretly collect users' browser activity, raising serious concerns about user privacy on Google Chrome Web Store.

[–] [email protected] 26 points 2 weeks ago (1 children)

You can just uBlock the thing on the front page.

If your browser recently tried killing uBlock - switch.

[–] [email protected] 5 points 1 week ago (1 children)

I've been able to nix so many intrusive web elements with the ublock picker tool, often without leaving a trace due to modern web design practices. The YouTube shorts shelf is one such case, and it's shocking how well it worked!

[–] [email protected] 1 points 1 week ago

Yeah, uBlock mostly just adds CSS rules as display:none, and Google still pretends that's some kind of security nightmare.

Because they're an abusive monopoly that must be shattered.

[–] [email protected] 23 points 1 week ago (2 children)

Probably an unpopular opinion, but I instead installed an extension to force shorts to play as normal videos. Some channels have shorts worth watching (imo), but this prevents endless scrolling through short after short, I have to intentionally choose to watch them by clicking on the specific thumbnail, every time.

I find it a decent compromise.

[–] [email protected] 2 points 1 week ago (2 children)

whats the extension's name? + is it on ff?

[–] [email protected] 2 points 1 week ago* (last edited 1 week ago)

Just to give a little bit of context, shorts can natively played as videos by replacing the www.youtube.com/shorts/[...} url with www.youtube.com/watch?v=[...], so a simple url replacer will do as well.

[–] [email protected] 1 points 1 week ago

Agreed. There is some exclusive content by my favorite creators that wouldnt really work as long form content.
If it just wasnt vertical...

[–] [email protected] 6 points 2 weeks ago (1 children)

I like how the recommended remediation to this malicious extension is to install an extension for monitoring extensions.

Serious question though: is "can connect to network" a permission on Chrome apps? What about Mozilla? It seems like this, more than anything, is what needs to be locked down for all apps (beyond just browser extensions). Like on my MacBook for example, I have to give apps explicit permission to access folders like Documents. But I'm pretty sure they can all access the Internet without restriction, right? That seems crazy to me.

[–] [email protected] 5 points 2 weeks ago (1 children)

Get Little Snitch.

Although yeah it’s wild that’s not built in.

[–] [email protected] 4 points 2 weeks ago

phew it's not unhook

[–] [email protected] 2 points 1 week ago

youtube shorts deflector?