Live data from Hacker News

Never connect to ProtonMail using Chrome

old.reddit.com

71–80 of 289 posts

Re: Never connect to ProtonMail using Chrome

#71
post #10

If you care about privacy these days: Remote self-destructible VM for browsing with Firefox in incognito mode (only sites you NEED to, that REQUIRE JS), through multiple VPNs over multiple proxies. Everything else is command line HTML parsers (also on different, remote VMs), or API endpoints (HN API as an example?). Need email service? Self-hosted, tiny email-server somewhere in eastern Europe. DDNS etc. Local machin…

why eastern Europe?

Re: Never connect to ProtonMail using Chrome

#72
post #66

I just don't understand how so many people in the HN community, who are so vocal about privacy, turn around and use Chrome. Don't feed the beast.

Here is an alternative view from Theo De Raadt, OpenBSD founder: “[firefox catching up with chrome’s security] is lipstick on a pig”: https://marc.info/?l=openbsd-misc&m=152872551609819

One could say that it doesn't matter how many different privilege separation levels Chrome has if it so readily exfiltrates your data to Google's servers.

Re: Never connect to ProtonMail using Chrome

#73
post #28

the language detection is done client side; many years ago I pulled the code out to use it in another project! presumably she had "automatically translate" on...

The detection, maybe. The translation, on the other hand, is most likely done in a server.

Re: Never connect to ProtonMail using Chrome

#74
post #17

If you care about privacy, you really shouldn’t be using a browser that was created by a company that makes its money by learning everything about you and reselling it to the highest bidder.

> and reselling it to the highest bidder. This isn't a thing that Google does

Never thought I'd see a google apologist on HN when it comes to privacy violations.

What is it about the big G that you give them a pass for? It certainly isn't their tract record of keeping your privacy...

Re: Never connect to ProtonMail using Chrome

#76
post #8

> But, on her computer, my mail appeared like it has been translated from French to English then to French again... After a bit of fiddling, I discovered that disabling the "suggest to automatically translate a website in a foreign language" option solved the issue... That every email, even in ProtonMail, is sent to Google even if, in this case, the translation should not happen (translation had been disabled for bot…

It's a bug but what is to stop Google from sending everything you type in any textbox to Google? Have they said anywhere that they won't do such a thing? Completely trivial to do and extremely useful in providing data about you to Google that they could potentially never look at and use to train AI.

And what's to stop Mozilla from doing so? Or any other browser?

Re: Never connect to ProtonMail using Chrome

#77
post #66

Earlier quoted context omitted.

Here is an alternative view from Theo De Raadt, OpenBSD founder: “[firefox catching up with chrome’s security] is lipstick on a pig”: https://marc.info/?l=openbsd-misc&m=152872551609819

One could say that it doesn't matter how many different privilege separation levels Chrome has if it so readily exfiltrates your data to Google's servers.

True. But security considerations add an important dimension to the conversation which is often missed.

Re: Never connect to ProtonMail using Chrome

#78
post #28

the language detection is done client side; many years ago I pulled the code out to use it in another project! presumably she had "automatically translate" on...

^ yes the language detection is done within the browser. See https://www.google.com/chrome/privacy/whitepaper.html#transl...

Re: Never connect to ProtonMail using Chrome

#79
I don't understand how this is related to ProtonMail. It reads more to me like "never use Chrome [if you care about all of your web content being sent to Google]". Sure, ProtonMail is likely to have personal, private stuff in it but so does a bunch of other things, eg. internet banking.

Re: Never connect to ProtonMail using Chrome

#80

Earlier quoted context omitted.

And I don't understand how so many people in the HN community can believe such conspiracy theories about Google and Chrome, what info they collect and how it's used and shared. AFAICT Google doesn't share any info with 3rd parties unless you sign up with some 3rd party and ask them to share the info. I've never used my Google account to sign up with any 3rd parties. As for Chrome collecting my history.(a) I want that…

It doesn't matter if they're not sharing it with third parties. If the user in question did not give specific permission for Google to steal their ProtonMail email/s and send them back to Google servers, then that should be a crime. It should be a felony, just as it would be if a Google employee opened or obtained my physical mail without permission, scanned it in some manner, and took it back to their offices.

that is a fairly uncharitable interpretation of what happened. At worst Google tried to be helpful by offering a free translation service and the user clicked "yes, translate all pages in language X to Y". Chrome does not automatically translate pages out of the box. it asks
Post reply on HN