Until Netflix decides you can only watch high resolution content via Chrome passing the DRM check.
Or your banking website does the same. Or YouTube. Or PayPal. And so on.
Though, honestly, nobody so far came up with any good explanations as to how this DRM scheme inside a browser would truly prevent adblocking and screen recording - my browser hasn't got higher privileges than my admin user account.
A few of us sitting and using Firefox while Google is suggesting being able to control what computer you use, what software is installed, what plugins you are allowed to have?
This is a very big threat not solved by using Firefox.
Honestly, I've just switched from Brave to Firefox after trying it awhile ago and I can't even begin to say how much I hate it. Despite turning off settings to open new tabs, every website I open browsing on mobile opens a new tab, so before I know it I have 27 tabs open, the desktop version is clunky, I had to adjust a ton of settings to stop it from downloading in the background every file I just wanted to view or print, and it won't even let me print or save as pdf a lot of things, so I have to open Chrome or Brave to do that stuff anyway. I feel like grandma trying to learn to text using it, but for now I'm going to press on because the ad blocking works better than Brave and I like some of the extra features and plugins.
Right. I mean there's always going to be a way. Your open source browser can run a spoof of an "official" browser, present itself as a valid user, load the page with all the ads and tracking in a sandbox in between, strip all of it out and serve you the actual content.
Or maybe people will eventually be fed up and we'll start our own internet completely out of corporate control.
Your open source browser can run a spoof of an “official” browser
Not if the server requires the digital signature of a challenge to be produced by a key whose certificate is signed by a "trusted" third party, said third party only providing that key at runtime, if your browser can also provide the same kind of authorization from the OS, itself being only able to produce it if it can safely determine that it's running on completely locked-down hardware AND having online-activated DRM tells him he can provide such key; the hardware itself requiring constant online connexion to ensure it's "authorized", and including yet another layer of keys in hardware.
There's been progress toward this kind of things. At every step, people warning about the risks are seen as lunatics. SecureBoot preventing booting a custom kernel? No problem, microsoft will sign your keys. TPM not delivering keys to non-trusted kernels? No problem, just don't use it (and don't get the keys, obviously). UEFI requiring digital signature to be flashed? It's for your safety, but we won't give you the keys or it would defeat the purpose. Embedded CPU inside your CPU running opaque code on every operation you do? Trust me bro, there's no problem here.
Sure, opensource (or even just open at this point) alternative will most likely remain available as a niche, but once all major services that people want requires such a chain of control, the vast majority of people will gladly flock to locked-down system. Heck, it's already happening. Nowadays I can't even log into my bank website without a trusted iOS or Android device. The "free, open" alternative will be rare, expensive, and only work for people that cares. Which is not too much sadly.
Maybe the thing to do here, when web sites start enforcing this, is to swamp them with support requests. Don't write a screed or manifesto with ethical or technical reasons why this is wrong. Pretend to be a non-technically-inclined user and tell them you've spent hours trying to get it to work and your browser keeps throwing up errors you don't understand. They will ignore the principles, but if they think the technology is "too hard" for their "dumb users," that might carry more weight.
I don't think this will work. If companies can get away of slapping us by doing "please use Google Chrome or other Chromium-based browsers" just because Google implements the most niche, probably privacy-last, feature ever, then they will get away with it this time, again.
I literally can't log into the Amtrak Android app unless I have Chrome installed. It strictly relies on Chrome custom tabs. Other browsers that support custom tabs don't work.
I cannot imagine any reason for this except sheer ineptitude.
Guess what Amtrak support told me when I reported this as a bug?
It'd help if the government wasn't run by a bunch of ancient humans that were there when cavemen would draw on cave walls. The government has shown time and time again they don't understand tech but always try to act like they do. Take that tiktok case for example. They made themselves look like idiots to the USA. Pathetic.
I think the moment for me was when they had Mark Zuckerberg himself, testify to Congress.
They didn't "grill him" as media would've liked to have you believe. The guy danced around all of Congress because they themselves didn't know a damn thing about what he was saying. Of course he wasn't penalized and got off scot-free.
Just like every other tech company. The FTC, has no teeth. The FCC, has no teeth. Congress, has no brain.
It's already too late. Google has a monopoly on the browser market. Do you think your regular normie would continue to use Firefox if Netflix, Instagram, TokTok etc. don't work anymore?
There is nothing we can do. The internet of old is already lost.
Also sounds like you're describing a Chromebook. Which, incidentally, schools seem to be abandoning because of the fact that they become useless on a predetermined date.
Basically by allowing websites to refuse to load unless the browser the operating system running the browser promises that the user isn't allowed to know what the computer is doing. And Google super duper promises this won't be used for evil.
allowing websites to refuse to load unless the browser the operating system running the browser promises that the user isn’t allowed to know what the computer is doing
To be clear - even in that world, not having WEI would make you much more suspicious than a 'normal' user, so you're effectively describing every Firefox and/or Linux (etc) user seeing captchas all the damn time. If Cloudflare used this as a signal, that'd be a captcha for 20% of websites.
Try using Tor today and see how inconvenient the web becomes. Just 'not blocked' doesn't mean you get a reasonable experience.
The only healthy route for the web is fair access and free competition between clients. WEI sets that on fire.
Sure, if the experience is degraded but not completely broken, I'm still down to ddos the perpetrators. And I get the feeling I'm not the only one. I could see this getting pretty organized.
But a $35 le potato sbc and run the two lines of commands to install pi-hole. Then, set your router's DHCP to the pi-holes IP. BOOM no more ads or tracking. Your welcome.