Email or username:

Password:

Forgot your password?
Asahi Linya (朝日りにゃ〜)

This is scary. It's (strong) SafetyNet for websites.

Every now and then I run into another Android app I can no longer run because someone decided my phone, running an official build of my choice of OS, that isn't even rooted, is "not trustable".

Now they want to start doing that for websites.

This kills open Linux on the desktop (including Asahi Linux). It kills alternative browsers. It is a backdoor to kill ad blockers.

No. Just no. Please.

github.com/RupertBenWiser/Web-

153 comments
Tᴀᴋᴀɴᴀsʜɪ Hᴏʀᴏ

@lina@vt.social I love how people keep claiming that their arbitrary websites and apps need to know exactly the software you are running "for your own good" while even some bank apps (like the ones I use) don't care about attesting client-side integrity.

mofu mofu fumo
@lina how many time do i have to say "stop using web tech" before people understand that they need to stop using web tech
gudenau

@lina Is this victim blaming? It's claiming that users abuse websites but it's users coping with the abuse of websites...

Also on my rooted phone with Xposed modules I pass SafteyNet...

Edit: The DRM crap was bad enough....

gudenau

@lina I was going to open an issue with some decent talking points about this being awful but they don't want feedback.

서버메이드 깐프 perillamint

@gudenau @lina I'll substitute my answer with this GH comment. github.com/RupertBenWiser/Web-

Also, SafetyNet bypass is becoming harder, due to TEE attestation.

They eventually kill the legacy safetynet attestaion, when they 99% sure user no longer using legacy devices anymore.

서버메이드 깐프 perillamint

@gudenau @lina Users are being tracked using Widevine EME, although it is not designed for. I also smell same thing from this proposal.

IT WILL BE ABUSED.

Natasha Nox 🇺🇦🇵🇸

@perillamint @gudenau @lina I'll never understand these cognitive backwards drivers who believe people saying "we won't abuse this system, promise!". How naive can someone be.

gudenau

@Natanox @perillamint @lina To be fair Google has a track record of abusing systems.

Natasha Nox 🇺🇦🇵🇸

@gudenau @perillamint @lina OF COURSE they have. They're a public company, to please their large shareholders they'd sell their customers' right kidney if they could. They literally break the laws on a whole continent (Europe) because it makes more money than it costs for now.

⚠️ Crash (Fae/She)

@Natanox @perillamint @gudenau @lina If they're not willing to trust users with access their public data, then users definitely shouldn't trust them with access to their private data.

m
@Natanox @perillamint @gudenau @lina there's a certain kind of legalistic sheep-for-brains that will automatically, sincerely assume that something not being permitted means it is actually impossible

it's the kind of person who, if trapped in a collapsed fully stock supermarket in a natural disaster with a crowbar and can opener and water filtration system, will fail to find anyone to take payment and starve to death
@Natanox @perillamint @gudenau @lina there's a certain kind of legalistic sheep-for-brains that will automatically, sincerely assume that something not being permitted means it is actually impossible

Miga

@lina This is a pretty serious issue, yeah... The web needs to be open, and this effectively would close it off.

竹下憲二 【記録係】
@lina @freeplay It's almost like that's what they're trying to do. :blobfoxangry:
Nicolás Alvarez

@lina Attestation and DRM is one of the biggest roadblocks to implementing Apple server protocols (eg. iCloud) in free software clients. Some have DRM-grade obfuscated code (literally the same code obfuscation as FairPlay!), but there are already some services using strong cryptographic attestation instead, and those feel frustratingly "game over" to me.

...now Google wants that kind of crap on the *web*?!

Neel Chauhan

@nicolas17 There should be a law that forces online services to allow third-party clients, a la what Twitter and Reddit used to do until they both fucked up.

EU, keep notice of this.

riley is gay :verified_gay:

@lina i’ve heard that at least there are voices within google who are against this (probably recognising it would get the FTC on their ass for monopolistic behaviour)

jan Susu
@lina @usernameswift
you know what would really improve the internet? if a small group (their words) would be able to decide if your stack was trustable. Cartels improve everything
DELETED

@lina Google is not anticompetitive I swear we’re really good company I swear it please keep giving us money for the information we collect from innocent civilians.

Lawler Hix :verified:

@SofieLovesYou @lina "Google, why is it that when you rebranded to Alphabet Inc, you chose to sunset your longstanding motto, 'Don't be evil?'"

"Well you see John Q public, go fuck yourself."

DELETED

@lawlznet @lina I think they rebranded to Alphabet to make people think they make children’s toys or something.

or to sound like a business that Dr. Evil made to cover up his dastardly plot.

Like literally it’s so funny, it’s like naming your business “Integers” and expecting people not to think you ran out of ideas

DELETED

@lina Is there anyway to voice my disapproval of this? In any way that would actually have meaningful impact?

Ian

@lina Wow, their Github issue tracker is full of people who are not happy. Wonder what they thought would happen? 🤔​

Anders Moumoulidis

@lina back door my ass, they state as much in slightly less clear terms. They know.

Joby (chaotic good)

@lina "This trust is the backbone of the open internet"

IS IT THOUGH?

Joby (chaotic good)

@lina Most recent blog post by the author of that repo: "I just spent £700 to have my own app on my iPhone"

Complaining about how expensive it is to make an app for his own phone, because of how closed the iOS ecosystem is.

I may die of irony overload.

benwiser.com/blog/I-just-spent

Lawler Hix :verified:

@lina inb4 second internet forms in response and the 'deep web' expands to include completely normal websites that otherwise don't want to use a tyrannical anti-ad blocker standard.

LisPi

@lawlznet @lina That's kinda what I've been wanting and declaring the #clearnet dead for (also there's no sufficient trust for running arbitrary code from strangers on there, so sites don't expect to be able to either unlike the clearnet).

Caveat that "darknet" is more the appropriate term.

"Deep web" is a lot more more general.

wilco

@lawlznet @lina "Walkaway" by Cory Doctorow. walkaway-net vs default net. I, too, think this is the way it goes.

ᗪ丨丂卂乃ㄥ乇ᗪ :shotaland_flag:

@lawlznet @lina I was thinking something similar to this. I had a few ideas as to how this could work, actually.

Here are a few of my theories.

The internet kinda splits up, alternative web browsers are made to disable this feature, and only websites with this stupid tech turned off are accessible. This would be small self-hosted sites, sites that care about privacy, and I’d assume most E-commerce platforms or anything that has a paid for product which is how it monetizes itself.

This leads into my other theory as to why I feel this will not be implemented at scale. Let’s assume for a minute you own a huge e-commerce platform, whether this be an actual storefront Amazon or a subscription service such as Netflix. I sit here, and I think about the general population, especially older people. These individuals would rather not upgrade their hardware and barely know how to use the computer for browsing, shopping, and email checking. These are people who use Netflix, Amazon and similar. Now, let’s say we just flipped this switch. This isn’t a “switch to chrome because we don’t like Firefox users, lol. :P” message, this is a “go out and buy this specific type of hardware to access this website that you spend good money on.” That’s not going to go by well, especially for some individuals who don’t know what hardware to buy, can’t afford it, or barely want to use the internet as is. I genuinely do not see companies, especially ones who make money by actual purchases/subscriptions, wanting to actively exclude this section of their audience. An audience who frequently has a just works mentality. An audience where, if something doesn’t work with their computers or phones, just drops it and goes and does something different for the day in hopes it will work tomorrow.

I think this would actually be who these companies would be negatively effecting the most. Tech-savvy privacy-minded people are likely to just go without these websites or find smart ways around it via compartmentalization or other methods if they, absolutely must use them. But would probably be fine with the smaller sites which did not have this sort of hardware authentication enabled. I honestly don’t see this as a huge issue for those who are tech literate. It’s those who are most likely to be using FAGMAN services, those most likely to prefer the “convenience” and those most likely to go “well my friends use it” or “it just works” who will be negatively impacted.

That’s my thoughts on this, what I think would happen if it did get implemented on a mass scale and why I do not think it will, or if it does don’t think it will last.

@lawlznet @lina I was thinking something similar to this. I had a few ideas as to how this could work, actually.

Here are a few of my theories.

The internet kinda splits up, alternative web browsers are made to disable this feature, and only websites with this stupid tech turned off are accessible. This would be small self-hosted sites, sites that care about privacy, and I’d assume most E-commerce platforms or anything that has a paid for product which is how it monetizes itself.

Softwarewolf

@lawlznet @lina gemini.circumlunar.space/ Basically a network of clients and servers inspired by the Gopher protocol and very simplified HTTP. It's kinda neat, if niche and nerdy. :3

Art Rosnovsky

@lina that’s a solid “hell no” right there

Kote Isaev

@lina Sounds like response will be some "fediweb" and apps and browsers for it, where websites intentionally do not use that web-drm, WEI, and "Privacy Sandbox" which is seems to be part of WEI.

oceaniceternity

@lina they basically want you to have to run an anticheat to... Access a website? For more security? Why?

Why do they even need this information about my device? Isn't it good enough to just get a https request?

Annie

@lina@vt.social You can now only contribute to the issue tracker if you've contributed to the repo before lol.

27329ed9-2211-a1ba-9371-e2641bf0dcb6
@lina >An owner of this repository has limited the ability to open an issue to users that have contributed to this repository in the past.
Bob Brown 🕹️

@lina "Detect non-human traffic in advertising to improve user experience and access to web content" - there's the motivation, Google are their advertisers are losing HUGE amounts of money due to this, see malicious.life/episode/episode and malicious.life/episode/episode

Josh

@gurubob Agreed, although I'd say they're not losing the money, just not making as much money. It's not like they're entitled to unlimited profit at the expense of users freedom.

Bob Brown 🕹️

@krnlg yeah of course, my bad framing …. they’re not accelerating their profits as quickly as they could be. That’s a better way to frame it.

Twitter Refugee Liason :marseybluecheck:
@lina just don't use websites that use it

Do you have to use apps that require SafetyNet? No, you can buy McDonalds with a debit or credit card or cash.
sounddrill :verified_dragon:​

@lina strong checks? Stronger spoofing.

Safetynet is long obsolete, the new thing is called play integrity.

Displax on github has tried to solve it(strong integrity) already for many phones!

I assume someone will come up and tackle this browser thing.

Trash Panda

@lina@vt.social
All because they were ticked off by ad blockers, if they never allowed intrusive ads in the first place people wouldn't have made them.

mybarkingdogs

@lina Also, along with the many other reasons this is bad, it will be a great time for the malware sites, spammers, and other general bad stuff.

Because it gives them an excuse, a reason to tell people to do unsafe/dangerous stuff or ignore warnings or whatever.

If Google goes forward with this, even *before* stuff starts breaking en masse as a result, they will have induced alarm fatigue, encouraged people to ignore/get around *legitimate* warnings and safety guards because they're producing bullshit notices and prohibitions and warnings.

@lina Also, along with the many other reasons this is bad, it will be a great time for the malware sites, spammers, and other general bad stuff.

Because it gives them an excuse, a reason to tell people to do unsafe/dangerous stuff or ignore warnings or whatever.

If Google goes forward with this, even *before* stuff starts breaking en masse as a result, they will have induced alarm fatigue, encouraged people to ignore/get around *legitimate* warnings and safety guards because they're producing bullshit...

安坂星海 Azaka Sekai

@lina more Google research that no one asked for great

austin, not your sweet baboo

@lina sometimes, i think: techbros should have been left in the supply closet

Chris Lilley

@lina "and the risk of websites using this functionality to exclude specific attesters or non-attestable browsers. "
A risk the proposers seem willing to take.

𝘋𝘪𝘳𝘬

@lina On the other hand: Only questionable Sites will use this.

Bobby

@lina yeah that's true It will kill a whole bunch of stuff, but it's not like they will listen to us. They're continuing to push blocking ad blockers on YouTube. Look at Twitter and reddit they're not even budging on the community either. I hate how we're not listened to

alarig

@lina Authors: google, google, google, google. All is said.

Neuvillette

@lina soon there will be safetynet fix for web browsers. Or magisk alpha/delta for Chrome and all chromium-based browsers. Time to switch to Firefox.

Montgomery Gator

@lina Begging isn't going to stop anything, they've gone full "mind virus" ideology about this.

We need to break Chromium for as many web services as possible. Make it hurt to be on anything Chromium.

And where the heck is the anti-trust lawsuit? This is exactly the same as Microsoft and the Javascript stuff that caused the 1997 anti-trust lawsuit.

Vulcwen | Tessa

@lina My initial reaction is that this is another "you will own nothing" trick. But after a bit of reading.. yes it's a "you will own nothing" trick. Requiring a third party to judge if you're trustworthy is subject to all kinds of risks (for the regular user).

Fabrizio Pelosi 🐧

@lina it's also incompatible with their own Goal 4: "Continue to allow web browsers to browse the Web without attestation."...
Major websites (and banking sites) will SURELY start to use it to block "unsafe" web browsers...
Also, a lot of Antitrust issues are present (and this path will SURELY be tried!).
Hopefully @mozilla is by our side here... 🤞

Lea (headpat dispenser)

@lina@vt.social of course it's google again. let's hope this gets shot down the same way FLOC did

Super Piéton (🎲🥐) ⏚

@lina

The issue tracker shows that nobody is fooled by the aim of this shit...

ĸurth

@Super_Pieton @lina according to this guy we should all Not Assume A Hidden Agenda. 🙄
blog.yoav.ws/posts/web_platfor keep calm, put your concerns in the grievance box, nothing to see here, business as usual

Super Piéton (🎲🥐) ⏚

@kurth @lina

"put your concerns in the grievance box"

Yeah, count on me... 😏

awooo :blobfoxcheck: 🏴‍☠️ :bisexual_flag: 🐾 ⎇

@lina The ironic thing is that if you root your phone, you can actually downgrade to and bypass the "basic" SafetyNet attestation. But good luck with the new Play Integrity...

Sadly from the response the authors of this have given, I'm pretty sure they're being malicious and doing damage control at this point, because they keep repeating that this is not meant to block adblock or restrict browsers as if everyone had said that it was going to that directly. No, it's the websites that are going to use this to exclude ad-blocking browsers and any mutable OS out there. It's a clever trick on their part to not claim responsibility, TC is really insidious.

@lina The ironic thing is that if you root your phone, you can actually downgrade to and bypass the "basic" SafetyNet attestation. But good luck with the new Play Integrity...

Sadly from the response the authors of this have given, I'm pretty sure they're being malicious and doing damage control at this point, because they keep repeating that this is not meant to block adblock or restrict browsers as if everyone had said that it was going to that directly. No, it's the websites that are going to...

Kevin Chadwick

@lina

Oh dear. For websites now!

This is why I will not run Google pay/wallet. I updated my old phone to lineageos due to Nokias late and then ended security patches. A totally rootable phone beforehand yet it could run google wallet and LineageOS was blocked due to an amber bootloader alert. Netflix was blocked too!

Fish Id Wardrobe

@lina On the plus side: if this is implemented and millions of users find they can't access certain web sites, what will happen? I imagine a lot of them will switch to Firefox.

ĸurth

@fishidwardrobe @lina FFs share is extremely low. i think google waited for some kind of share-threshold to go public with this stuff.

Fish Id Wardrobe

@kurth @lina True, but it's not as if FF has dropped out of the public consciousness. Folks will switch right back.

ĸurth

@fishidwardrobe @lina hmmm, i'm not sure about that, though i'd be happy to. you know, that critical mass that would be needed to not eventually force that googleshit on anybody anyway. if enough sites are requiring that 'attested environment', and only 2% of the FF-share is complaining, it will be there regardless of whether people *could* switch to FF. they just dont. it seems well timed and calculated

Haijo
Problem is, Google has a monopoly. Most people are using Chrome on Windows and won't even notice this unless they use an adblocker (or a tracker blocker, or anything alike).
The people that use an adblocker just wouldn't be able to access the websites that are blocking adblockers, installing Firefox won't help them unless Firefox also implements the DRM.
Google is trying to pull a Microsoft here (embrace, extend, extinguish)

CC: @lina@vt.social
Problem is, Google has a monopoly. Most people are using Chrome on Windows and won't even notice this unless they use an adblocker (or a tracker blocker, or anything alike).
The people that use an adblocker just wouldn't be able to access the websites that are blocking adblockers, installing Firefox won't help them unless Firefox also implements the DRM.
Christian Brunsch

@lina it’s time for Rache Bartmoss to finally nuke the net.

Tim Ward ⭐🇪🇺🔶 #FBPE

@lina "Users often depend on websites trusting the client environment they run in."

What a bizarre idea. Surely everybody knows that you have to code the back end on the assumption that the client can't be trusted, and might even have been replaced by something malicious?

Dushman

@lina@vt.social

> Now they want to start doing that for websites.

I say we shouldn't give a shit as this is not that significant. There's nothing to really fret over. Every non garbage browser will throw this feature in the garbage. If you use Chrome then you get what you signed up for. ¯\_ (ツ) _/¯

fabiosantoscode

@lina I wonder if this can be blocked on our websites. With a message about the browser not being trusted with the future of the web, and a few links to install another one.

If enough websites implement, the tech can't move forward.

Franz Graf

@lina they should realy alaborate more into the "how can this be misused" part ... oh my.
Thanks for posting

Greg Dance

@lina

Please could I add to your concerns & take this convo on a little speculative trip?

I've been a keen watcher of the big bad machinery encroaching the free web space for several years.
Why I ask?

Its very easy to assume lust for ultimate control & money by them, but if we look above their individual frailties we might see why they want to control the messaging on web their way.

So I think it may be about this.

columbia.edu/~jeh1/mailings/20

They are terrified of taking the blame for this!

@lina

Please could I add to your concerns & take this convo on a little speculative trip?

I've been a keen watcher of the big bad machinery encroaching the free web space for several years.
Why I ask?

Its very easy to assume lust for ultimate control & money by them, but if we look above their individual frailties we might see why they want to control the messaging on web their way.

シナモロール :kirby:

@lina banking and financial apps don't care but god forbid I top up my own electric/gas!

Logyi a téli hidegben

@lina @stevelord google has been pushing these sorts of things via the WHATWG and what not as well; it’s truly awful. I was just reading this via email this morning; the juxtaposition of these two paragraphs is wild:

Qbitzerre

@lina the ongoing war against general-purpose computing.

Malaĉa maman chat 🌟

@lina also, is this me or everything about this proposal is (suspiciously) super vague and unclear. what is an attester in practice? a non-free binary like for DRMs?

BigTheDave

@lina

Let's reframe that opening bullet list:

- Companies make expensive products with a business model that's being eroded as Users realise their data has real-world value.

- Companies want to know that the clients using their site have personal data worth selling

- Companies want to force trust to the client side rather than spend money writing secure code.

- This bullet point is nonsense. Malicious apps mimic the interface to steal passwords, then log in with the original software

Francis ☑️

@lina open web vs closed web. Not a step forward for users.

Tech10

@lina can't wait for internet 2: the hopefully better one!
Ok, but seriously, i recently switched to Linux Mint, because Windows was slow, i will NOT switch back to using Chrome and Windows just because some crackheads decided it would be funny to lockdown websites. I prefer looking at a basic html using Netscape than put up with this nonsense.

Dawid Rejowski

@tech10 @lina

Maybe GNUNet + some new user-owned easy to modify browser?
I hope for this direction.

Tech10

@didek @lina I have never heard of GnuNet before, i looked it up, i think i'll try it. Thanks to have brought it up!

Dawid Rejowski

@tech10 @lina

You can try, but it's so much work in progress that there is no sense in installing now unless wanting to develop 🫣.
Still want to show it as a concept that we can do things differently.

SofaKingHigh

@lina anyone website dumb enough to enable better be ready for users to leave, I don’t care if it’s YouTube, or some other site I like, I’m not giving up more privacy and control of my own personal computer just because some CEO’s got a hair up their ass over Adblock

Christian Euler :mastozany:

@lina That's pretty much broken by design.

They say: We need to assure that client devices are trustworthy enough to run our code.

I say: No way, stupid. Always assume that your bloated code runs in an untrusted environment and design it accordingly. And get your hands off my client browser. My device - my rules.

ATurnOfTheNut

@lina I definitely think killing those things is the main point. The days of "Don't be evil" being a selling point are long past (and outgrown)...

simonbp

@lina Besides the myriad technical issues, the developer of the monopoly web browser seeking to develop technology that would shut out any alternatives, specifically to benefit their ad department, should smell to antitrust authorities what frying bacon smells like to famished dog.

monoxane

@lina This goes even further, it kills wget, it kills curl, it kills aria2, it kills the Internet Archives scripts, it kills Archive Teams entire ability to save sites in hours, and most importantly of all it practically kills the end users ownership of their device.

Chris Colvin :blobcat:

@lina "This trust is the backbone of the open internet..."

Yeah... Ok 😒

nw8man 🇬🇧🏴󠁧󠁢󠁥󠁮󠁧󠁿🏴‍☠️✝️

@lina everyone root your phone's, delete Google and all be happy. Google = Evil.

ima

@lina their way of describing it is awful, why do they keep saying the "web page" is doing things, and that the "web page" sends stuff to the web server??
The web server is hosting the web page. Just say it's the client that's doing it, what are they trying to obscure, it becomes confusing to read.

kit

@lina I simply won't use websites that block me on this, and that's fine. But I will use other websites that don’t.

kit

@lina oh a real note write to ur congressman and tell them it’s time to break up big tech with antitrust, google wouldn’t pull this shit if it didn’t own chrome

Benjamin

@lina Adblocers. Privacy. Competition. Literally anything that Google doesn't like. And don't believe for a SECOND that all the other ad- and spy-companies like Facebook and whatnot won't follow. The free and open Internet dies here.

Benjamin

@lina The more I think about this, the more of a nightmare this is.
Need to use Chrome on 80% of all websites? People will use it on 100%.
Need to look something up even on a non-Google page? Chrome knows. Google knows.

Governments want to know who looked something up they don't like? "Just Google it" will get a whole different meaning.

Benjamin

@lina I hear a few states in the US are pretty big on this right now.

Stefan

@lina It's probably about making sure that everyone submits to the "central scrutinizer".

Jake in the desert

@lina exactly - this is dangerous stuff for people who want to build or make any of their own stuff. Their goal is and always has been to homogenize the whole web

Kobold

@lina And we are already late, it is merged into Chromium already.

bugs.chromium.org/p/chromium/i

It's about time to kick all Chromium based browsers off our devices!

Piousunyn

@lina

I miss Linux, suspect the same people smothering android are doing the hardest to throttle or end linux. Google?

epicEaston197

@lina
hold on does this mean if I use a browser like Firefox a website can decline my access to the site because I use Firefox?

korreckj328

@lina Best web browser ever linux.die.net/man/1/lynx

😭

Seriously though I feel like moving back to lynx and irc. Web2.0 is a failure lets go back to 1.0

Idcrafter

@lina i like that this hasn't happened to me on my pixel 6 pro and CalyxOS but it only isn't detected because it uses microG and a re-locked bootloader which passes safetynet if you enable it

quasigod

@lina@vt.social this has to be an antitrust case waiting to happen right? I don't see how this could possibly be implemented without many countries in Europe fighting it. The US on the otherhand I'm sure will just let it happen.

Rafael - Yakultjapa

@lina sorry, I am curious about this, but my knowledge of website is very little.

I read the proposal and what understand was this is a web-api where we will access all your backbones of softwares and hardware to prove you are a real person and not a human with a horse mask for protect whatever scam?

In a common world would be like, let's an authorize person to enter your house freely to guarantee no dangerous people enter, even if you don't have any way to distinguish a real or a fake authorized person and could potentially happen a fake person enter?

I want to understand because it's kinda nothing for average folks if they doesn't understand and usually they are the focus of this bull poop.

@lina sorry, I am curious about this, but my knowledge of website is very little.

I read the proposal and what understand was this is a web-api where we will access all your backbones of softwares and hardware to prove you are a real person and not a human with a horse mask for protect whatever scam?

Den Antares

@lina I see the GitHub repo already got flooded with complaints. Where else should I go to oppose this? Is there some way to get involved with the W3C or something?

0nepeop1e

@lina wait what? i understand why they trying to do this, but it really sounds bad

Pete

@lina Another problem is demonizing VPNs. I had to call my bank because "my IP address changed." LOL. At least with browsers you can change the user agent, sometimes. I wish browsers would include a mode for connecting to picky financial institutions. For certain services I have to turn off the VPN or install Firefox.

Drew Naylor

@lina Wonder how long it'll take the EFF and FSF to get on this.

Crazy Pony

@lina just an notice, but i have already noticed for years how stuff moved away from beeing a "Website" into calling it an "online App", and of course also companies really nagging you to download the real App instead of using the web

Kevin Karhan :verified:

@lina that is the very intention, cuz #AllGafamsAreEvil and they won't stop unless they get forcibly disbanded through #ShermanAntitrustAct or similar #Antitrust laws OR they've consumed everything there is!

#GAFAMs are like the #Flood - they can only be stopped by starving them!
youtube.com/watch?v=uzhJWMv_BN

Raptor :gamedev:

@lina This proposal is literally death to the open internet as we know it, effectively you would no longer be allowed to have an online presence unless google decides it's ok. Make a product that competes with google? oops, sorry, that's "unsafe", can't show that to end users!

Lets not forget that microsoft tried this in the 90s, it's what they LOST an antitrust suit over, banks/etc using activex to require websites authenticate that users are on windows using IE for "safety" was awful.

Go Up