meta-code-verify

Code Verify is an open source web browser extension that confirms that your Facebook, Messenger, Instagram, and WhatsApp Web code hasn’t been tampered with or altered, and that the Web experience you’re getting is the same as everyone else’s. (by facebookincubator)

Meta-code-verify Alternatives

Similar projects and alternatives to meta-code-verify

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better meta-code-verify alternative or higher similarity.

meta-code-verify reviews and mentions

Posts with mentions or reviews of meta-code-verify. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-05-15.
  • Code Verify: An open source browser extension for verifying code authenticity
    1 project | news.ycombinator.com | 21 Feb 2024
    (2022)

    https://github.com/facebookincubator/meta-code-verify is the goods, and is MIT

    https://github.com/facebookincubator/meta-code-verify#instal... says Safari support is "coming soon" (from 2022) so I guess they think those users don't need to "verify[..] the integrity of a web page."

  • Open Source Hacktivism, Open Source Gains Traction in the Enterprise, and More: Open Source Matters
    8 projects | dev.to | 15 May 2022
    Code Verify - A browser extension from Meta for verifying the integrity of web pages and detect executed code that’s not included in the site manifest.
  • Security experts declare all Proton apps secure after security audit
    2 projects | news.ycombinator.com | 18 Apr 2022
    > The server can at any time start serving malicious payloads

    True, and I call this threat model "Beware Each and Every Fetch" (BEEF) in contrast to the more common TOFU model (although if you trust a desktop app to auto-update itself then these two models might not be all that different).

    In any case, I think you're being a little quick to dismiss the idea of server-hosted applications. It's true that browsers don't natively have a nice way of pinning specific versions of a web app, but there is the clever hack of SecureBookmarks[0] (if you're prepared to sacrifice the UX), or, more realistically, you can pin the web app version using some sort of browser extension.

    Examples of the latter include the Signed Pages extension[1], and Code Verify[2], which is the result of a collaboration between Meta and Cloudflare (for securing the WhatsApp Web code, currently, but should eventually support other sites like Proton's too). Of course, it would be much better if this capability was natively included in browsers themselves, but hopefully adoption of this technology will pressure browsers and standards bodies to take ownership of this.

    [0] https://coins.github.io/secure-bookmark/

    [1] https://github.com/tasn/webext-signed-pages

    [2] https://github.com/facebookincubator/meta-code-verify

  • Code Verify – MIT extension that confirms that your WhatsApp Web not tampered
    1 project | /r/CKsTechNews | 12 Mar 2022
    1 project | news.ycombinator.com | 11 Mar 2022
  • A note from our sponsor - SurveyJS
    surveyjs.io | 3 May 2024
    With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js. Learn more →

Stats

Basic meta-code-verify repo stats
5
133
8.8
about 2 months ago

facebookincubator/meta-code-verify is an open source project licensed under MIT License which is an OSI approved license.

The primary programming language of meta-code-verify is TypeScript.


Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com