Hacker GitHub

← All repos

explainers-by-googlers/Web-Environment-Integrity

View on GitHub ↗ ★ 547 archived

90 mentions on Hacker News by 78 people: 13 stories, 77 comments · first 2023-05-08 · latest 2026-08-30

Mentions per year 90 mentions · busiest year 2023 (83)
20082026
  1. By requiring hardware attestation, like Private Access Tokens in iOS/MacOS (see https://blog.cloudflare.com/eliminating-captchas-on-iphones-... for example) and Web Environment Integrity and its successors (…
  2. The future is now (actually 2 years ago): https://github.com/explainers-by-googlers/Web-Environment-In...
    comment by GeoAtreides · 2025-07-22 · in How to Firefox
  3. Are you referring to the Web Environment Integrity[0] stuff, or something else? 'cos WEI was abandoned in late 2023. [0] https://github.com/explainers-by-googlers/Web-Environment-In...
  4. The problem is that any solution so far proposed for this is very privacy-unfriendly. For example, Google proposed https://github.com/explainers-by-googlers/Web-Environment-In... and this was shot down by privacy advocates (for very good…
  5. The author seems misinformed about the purpose of TPM to DRM schemes. The purpose of a TPM, in this case, is not to provide encryption, but instead to provide so-called ‘authenticity’. A TPM with its attestation capabilities can allow a…
  6. …I actually thought it was a pretty good idea but there were some privacy risks so it ended up DOA. https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  7. https://github.com/explainers-by-googlers/Web-Environment-In...
  8. For what it is worth google has fortunately abandonded the WEI proposal, a quote from the README of https://github.com/RupertBenWiser/Web-Environment-Integrity/ NOTE: This proposal is no longer pursued. Thank you for all the constructive…
  9. Github Repo has the following [0]: >> NOTE: This proposal is no longer pursued. [0]: https://github.com/RupertBenWiser/Web-Environment-Integrity
  10. Repo has be archived - "NOTE: This proposal is no longer pursued." https://github.com/RupertBenWiser/Web-Environment-Integrity
  11. …when money is involved. [1] - https://groups.google.com/a/chromium.org/g/blink-dev/c/Ux5h_... [2] - https://github.com/RupertBenWiser/Web-Environment-Integrity/...
    comment by devsda · 2023-09-03 · in The boiling frog of digital freedom
  12. I think the best issue raised is: Why would I, as a user, want this? https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  13. There were proposals for protecting against this in the WEI explainer under "Open Questions" https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  14. …for WEI: "Enforce or interfere with browser functionality, including plugins and extensions." https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  15. https://github.com/RupertBenWiser/Web-Environment-Integrity/... """ Attester-level acceptable browser policy If the community thinks it's important for the attestation to include the platform identity of the application, and is more…
  16. > How about you offer a reasonable opposing viewpoint Read the proposal: https://github.com/RupertBenWiser/Web-Environment-Integrity/... >That's settled then. Full filesystem, location, camera, and microphone access should therefore come…
  17. …of HN treats the upvote as "I agree/like this" instead of "boost this topic for discussion". 0: https://github.com/RupertBenWiser/Web-Environment-Integrity/... 1: https://news.ycombinator.com/item?id=36785516
  18. …where that dynamic is inherent. to play the devil's advocate, this is why google proposed the WEI ( https://github.com/RupertBenWiser/Web-Environment-Integrity/... ). Be careful what you wish for...
  19. …blockers at all here. The first example in the WEI doc is enforcing that ads are viewed by humans: https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  20. …considered the virtues of this to be. https://github.com/mozilla/standards-positions/issues/852 https://github.com/RupertBenWiser/Web-Environment-Integrity/... I stopped reading after the explainer’s intro section. The first example is…
  21. …WEI needs that data to enable the kind of "DRM for the web" use cases we're reading about. https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  22. …the motivation is against that, luring people for the $20 is just the bait, literally a bait. [1] https://github.com/RupertBenWiser/Web-Environment-Integrity [2] in the article itself “If proof of personhood is not solved, decentralized…
  23. …reaching that conclusion. Suppressing GET request noise isn't any of the use cases described at https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  24. One of the devs is using the CoC to silence criticism, even CoC-based criticism: https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  25. …he wants on his own device. https://benwiser.com/blog/I-just-spent-%C2%A3700-to-have-my-... https://github.com/RupertBenWiser/Web-Environment-Integrity
  26. Not exactly a nutshell, but here's an explainer: https://github.com/RupertBenWiser/Web-Environment-Integrity/... And here's why it may be bad: https://vivaldi.com/blog/googles-new-dangerous-web-environme... And the HN discussion on the…
    comment by stronglikedan · 2023-07-26 · in Google is already pushing WEI into Chromium
  27. Direct link to comment: https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  28. That one is 5 days old. The one being referenced is https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  29. …Some potential stakeholders are already suggesting to scrap holdback to support their use-cases ( https://github.com/RupertBenWiser/Web-Environment-Integrity/... ), leading to the possibility that it may not even be part of the final…
  30. …server for further use (like a recaptcha token). So for something like curl it could be no change. https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  31. See the original note: It was much more of a "maybe we could do this, but it has a lot of problems": https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  32. I think the actual comment is this one? https://github.com/RupertBenWiser/Web-Environment-Integrity/... On my phone this is collapsed and hard to find by default.
  33. …through attestation. Continue to allow web browsers to browse the Web without attestation. From: https://github.com/RupertBenWiser/Web-Environment-Integrity/... If it actually won't do any of those things, then that should be debated first.
  34. My email: Google has proposed a new Web Environment Integrity standard, outlined here: https://github.com/RupertBenWiser/Web-Environment-Integrity/... . This standard would allow Google applications to block users who are not using Google…
  35. …They're not keeping user data secure... Which is mentioned in their take-over-the-web document: https://github.com/RupertBenWiser/Web-Environment-Integrity/... If they can't do it now, how are they going to do it with WIE?
  36. …else is curious to see Google's "side" (motivations, technical or otherwise), here's the explainer: https://github.com/RupertBenWiser/Web-Environment-Integrity/... It's nakedly user-hostile. A blatant attempt to invert the "user agent"…
    comment by strix_varius · 2023-07-26 · in Google is already pushing WEI into Chromium
  37. …the time or so, making it impossible for websites to deny individuals based on failing attestation? https://github.com/RupertBenWiser/Web-Environment-Integrity/...
    comment by dontreact · 2023-07-26 · in Google is already pushing WEI into Chromium
  38. …Coles <torne@chromium.org> Shame on Kinuko Yasuda <kinuko@chromium.org> Shame on Rupert Ben Wiser: https://github.com/RupertBenWiser/Web-Environment-Integrity Google needs to be broken up.
    comment by danlindley · 2023-07-26 · in Google is already pushing WEI into Chromium
  39. …banks that want attestation do not want you using niche browsers to login to their services. [0] https://github.com/RupertBenWiser/Web-Environment-Integrity/...
    comment by kmeisthax · 2023-07-26 · in Google is already pushing WEI into Chromium
  40. …is already pushback against it from others closely involved in the spec & discussion around this ( https://github.com/RupertBenWiser/Web-Environment-Integrity/... ) and notably the attestation feature Google already shipped on Android for…
  41. https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  42. For context, this is a 2022 blog post by the author of the Google Web Environment Integrity spec ( https://github.com/RupertBenWiser/Web-Environment-Integrity - overview at https://www.theregister.com/2023/07/25/google_web_environmen... ).…
  43. Is https://github.com/RupertBenWiser/Web-Environment-Integrity/... the best place to shame?
    comment by foobarbecue · 2023-07-26 · in Google is already pushing WEI into Chromium
  44. …pushback against holdbacks from others closely involved in the spec & discussion around this ( https://github.com/RupertBenWiser/Web-Environment-Integrity/... ) and ignores that the attestation they already shipped on Android for exactly…
  45. The latest, tone-deaf response from a Google engineer: https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  46. …closed discussion, saying they'd bring it back at the end of the weekend and not bringing it back. https://github.com/RupertBenWiser/Web-Environment-Integrity/... Google went down this accusatory path before, when they sought to remove the…
  47. https://github.com/RupertBenWiser/Web-Environment-Integrity/...
    comment by charcircuit · 2023-07-25 · in So, you don't like a web platform proposal
  48. …means that it will be used. How is this not DRM? And how is this not dangerous to the open web? [1] https://github.com/RupertBenWiser/Web-Environment-Integrity/...
  49. …the proposal's proponents, but the API owners [2], many of whom are not Google employees. [1] https://github.com/RupertBenWiser/Web-Environment-Integrity/... [2] https://blog.chromium.org/2019/11/intent-to-explain-demystif... P.S. I'd love…
    comment by yoavweiss_ · 2023-07-25 · in So, you don't like a web platform proposal
  50. …the politics aspect of it (I think...), but what's the new technical thing being added here? [0]: https://github.com/RupertBenWiser/Web-Environment-Integrity/...