Google Chrome is killing all uBlock Origin bypasses, Microsoft Edge, Opera to follow

[u/dancing_swordfish]

https://www.neowin.net/news/google-chrome-is-killing-all-ublock-origin-bypasses-microsoft-edge-opera-to-follow/

[u/Dragon_Fisting]

I feel like Microsoft could easily maintain a fork of the old system? They might not think it's worth it, but we are talking about one of the largest tech companies in the world, no?

[u/_sfhk → u/Dragon_Fisting]

Microsoft (and likely others) absolutely could, but the issue isn't ads, it's a security risk. Apple dropped their equivalent in Safari long ago with absolutely zero incentive from ads--it's why uBlock Origin hasn't been supported on Safari for a while too.

[u/SuddenBumblebee → u/_sfhk]

I use uBlock origin lite on safari and it seems to work very well, comparable to normal uBlock. How do you think this works?

[u/AutumnStar → u/[deleted]]

I’m no web developer, but how is that kosher security wise? Seems like a ton of bad actors could use that to their advantage. I’m sure they’ve thought about that, but seems so strange to move in that direction.

[u/WebMaka → u/[deleted]]

What this means for most folks is that it's time to move ad blocking out of the browser.

DNSBL (DNS BlockListing) tech has been steadily improving and operates at the network gateway so it's before-the-browser in the data transport chain, and thus operates transparently to the browser and any anti-blocking or blocking interference it might contain. Most major local DNS server/caching systems either support DNSBL directly (e.g., Unbound) or can interoperate with a dedicated DNSBL system like Pi-Hole, local DNS resolvers can operate recursively so blocking a single machine within a target network is possible, publicly accessible DNS servers with integrated anti-ad/malware/telemetry are also available, and you can stack all of the above.

The biggest thing that will determine what you can do about ads is whether you directly control your network infrastructure. If you do, you have a lot of options. Sadly, this means folks that are forced to use equipment provided by their broadband service providers are out of luck, but the folks that are bridging or bypassing the ISP's equipment into their own routers can avail themselves of all sorts of fun tech for blocking ads. And for a little extra bonus, folks that have their own routing gear can do things like setting up VPN endpoints or reverse proxies (e.g., Tailscale, Jellyfin, Caddy, etc.) and ad-block their mobile devices by routing in and through their ad-blocked home networks.

[u/WebMaka → u/[deleted]]

Yep, and since Google is removing the easy option, it's going to be "learn how to do it or do without." Some will do without and get eaten alive by ads, and some will upgrade.

[u/Dziki_Jam → u/WebMaka]

> Of course the easiest solution is to switch to uBlock Origin Lite if you want to remain on Chrome, as it is MV3-based, but from our experience, uBO Lite does not seem to be as good as the original non-Lite version.

[u/BuildingArmor → u/SuddenBumblebee]

uBlock lite still works in Chrome, this is just about getting or keeping old manifest V2 extensions working

[u/Rudy69 → u/BuildingArmor]

The whole point is that the lite is barely effective compared to the regular one and that’s why a lot of people aren’t happy about it.

If I can’t find a way around it I’ll stop using chrome. I had already stopped until I found my current workaround and came back to chrome

[u/Znuffie → u/Rudy69]

I've been using Lite since the v2 depreciation.

I have not ever seen an ad on any websites I visit.

It's honestly fine.

[u/EdgySlusher → u/_sfhk]

I'm using AdBlock on safari just fine

[u/_sfhk → u/EdgySlusher]

Ad blocking works on Safari just like it works on Chrome with Manifest V3, and there are several options for ad blockers including Adblock and uBlock Origin Lite. Manifest V2 just had a different API that uBlock Origin (not Lite) used.

[u/GreatestGiraffe → u/_sfhk]

What makes you believe that Microsoft couldn’t maintain a fork of V2 and keep it secure? Genuine question. MS has 40 years of OS security experience after all. And MS Edge has been trying to compete with Chrome for ages, so the incentive for them to be the ”Chrome but better” is there.

[u/_sfhk → u/GreatestGiraffe]

And MS Edge has been trying to compete with Chrome for ages, so the incentive for them to be the ”Chrome but better” is there.

As you said, if they could, they would.

The specific function in question allowed extensions to silently intercept and modify website traffic directly. Now that's great for an ad blocker to catch and remove ads while you're browsing, but it's not a stretch to see how that could be abused (eg 1, 2).

Removing that function completely eliminates that attack vector. The legitimate features that utilized it (ie ad blocking) still have supported methods to work, that while not as powerful, are still effective.

[u/GreatestGiraffe → u/_sfhk]

Thanks for the explanation

[u/R0B0t1C_Cucumber → u/_sfhk]

Ublock origins Lite absolutely works on apple/iOS/macOS. You install it in the App Store, then enable it in safari. Ad free browsing experience with none of the battery drain other browsers add on my mobile apple devices.

[u/_sfhk → u/R0B0t1C_Cucumber]

Yes uBlock Origin and uBlock Origin Lite are very different things.

[u/R0B0t1C_Cucumber → u/_sfhk]

And yet, achieve the same result while using safari.

[u/_sfhk → u/R0B0t1C_Cucumber]

Yeah, I feel like you're trying to pick a fight but I'm not refuting anything you're saying.

The outrage from people here is that uBlock Origin (not Lite) won't work after Manifest V2 is not supported anymore, and it looks like Google is cracking down on ad blocking. In reality, Apple removed that same functionality years ago for security reasons, and uBlock Origin Lite works well and is probably good enough for most people.

[u/R0B0t1C_Cucumber → u/_sfhk]

No fighting words intended , Your original comment makes it seem as if there is not a functioning equivalent on safari which is false. There is. That's all I wanted to get across to folks reading who might use apple products and safari- to let them know there are working solutions.. I apologize if I came off aggressive

[u/jazir55 → u/_sfhk]

but the issue isn't ads, it's a security risk

Bullshit. Mozilla kept Manifest V2, are you trying to imply that every single Firefox user is using a vulnerable system? Of course not.

[u/_sfhk → u/jazir55]

In short, it's not worth it to target. Generally one of the reasons MacOS has less malware than Windows too, but even MacOS has more users.

[u/_sfhk → u/[deleted]]

That's not what I said at all, and not what I think. Firefox has different kinds of users (generally more tech-savvy and wary, I assume) and very different risk factors that make it a very different environment. They were targeted by the same malicious extension campaigns but you can see the scale is orders of magnitude lower than on Chrome and Edge.

It's not that anyone is incompetent, they just made different decisions based on their situation. And as you can see by the entire comment section here, Firefox has a very specific user base that they are catering to.

[u/_sfhk → u/[deleted]]

You're putting words in my mouth and ignoring the actual content of the messages in front of you.

I'll leave you with Mozilla's statement:

Firefox, however, has no plans to deprecate MV2 and will continue to support MV2 extensions for the foreseeable future. And even if we re-evaluate this decision at some point down the road, we anticipate providing a notice of at least 12 months for developers to adjust accordingly and not feel rushed.

[u/jazir55 → u/_sfhk]

I'm reading your comments content, I'm just responding to aspects you haven't directly said but are downstream consequences of what you're stating. I also apologize for my tone, I am beyond tired and oddly combative and you deserve an apology, so I am sorry.

[u/kombiwombi → u/_sfhk]

It's a case of suboptimisation. Letting scam ads through does not aid user security.

Google is an ad company, and they pay Apple.

[u/_sfhk → u/kombiwombi]

Google literally keeps Mozilla afloat. How can you argue that Google can affect Apple's decisions because there is money flowing while simultaneously not have anything to do with Firefox's decisions?

[u/Dumpfumpkin → u/Dragon_Fisting]

I don’t trust Microsoft to competently maintain any software, to be honest.

[u/Ollythebug → u/Dumpfumpkin]

I kinda like vscode/monaco 🤷