Google Cloud Fraud Defence is just WEI repackaged
Some bureaucrats at Google (business model: “Uber for proving your phone is certified to serve text files to six strangers”) have announced that their withdrawn Web Environment Integrity proposal is now a commercial product called Google Cloud Fraud Defense, because nothing says “integrity” like forcing users to scan a QR code with a device that has Google Play Services installed. Hackernews, literally all of whom are both principled open-web advocates and savvy bot-farm operators, argue at length about whether a $30 Walmart phone can bypass the attestation or whether the optimal amount of fraud is not zero, while a few brave souls suggest switching to Kagi as if that solves the problem of the web being gated by a duopoly. The open web survived because no single company could decide which hardware was legitimate; Google is determined to end that by training users to scan arbitrary QR codes for phishing, because the only thing more secure than a captcha is a trained user who will also scan their bank login prompt.