Google is working on new web standard; security researchers warn of serious ramification

Google is working on a new web specification which is dangerous to privacy and transparency of the internet users. The new bundles standard will allow advertisers and malicious actors to circumvent privacy and security protections.

The new standard will also render ad-blockers redundant, preventing them from intercepting website resources via the usual source. Synder first expressed concern about the plans in February. The proposed web bundles standard is designed to ensure the integrity of a web page and its sub-resources.

Google will allow websites to collect resources together into a single package. Packaging the resources into a .wbn file will help content delivery networks (CDN) to serve the sites as opposed to remote servers.

The web bundles will inhibit the effectiveness of ad-blocking tools and prevent web researchers from teasing out and interrogating specific resources. Peter Synder, Senior Privacy Researcher at Brave Software said, “This threatens to change the web from a hyperlinked collection of resources (that can be audited, selectively fetched, or even replaced), to opaque all-or-nothing ‘blobs’ (like PDFs or SWFs).”

According to Synder, the web bundles will let cybercriminals to evade privacy and security measures through different avenues. The malicious actors can evade the measures via concealing dangerous URLs into .wbn file, and randomising URLs for unwanted resources.

The proponents of the new standard claim that it offers no new ways to evade privacy. Synder argues that these beaches of privacy make drastically easier and cheaper penetrate the privacy.