rgadellaa’s avatarrgadellaa’s Twitter Archive—№ 9,943

        1. FB is going to ship its own chromium engine to power their IAB instead of using the system-provided webview. None of this solves the problem where the FB "browser" doesn't bring your privacy / security settings, sessions, passwords, etc. x.com/tomayac/status/1575943083732058112
      1. …in reply to @RGadellaa
        It's also perfect timing as the teams building these webviews are looking into ways to block FB's IAB if the site requests it, and open the page in the user's preferred, default browser. FB would have no control over that.
    1. …in reply to @RGadellaa
      By shipping their own engine, they can opt-out of this behaviour, ignore the site's request, and keep spying on the user.
  1. …in reply to @RGadellaa
    FB also mentions "stability" as an important reason for shipping their own engine. Apparently, apps that embed webviews crash when the underlying WebView app is updated. AFAIK, this would not be an issue if FB would just use CCT instead of a WebView. 9to5google.com/2022/09/30/facebook-android-webview/
    oh my god twitter doesn’t include alt text from images in their API
    1. …in reply to @RGadellaa
      Maybe more importantly, FB is pretending to be a browser without making it absolutely clear that they are asking for a LOT of trust. webventures.rejh.nl/blog/2022/in-app-browsers-are-tracking-you/
      oh my god twitter doesn’t include alt text from images in their API