Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Never connect to ProtonMail using Chrome

old.reddit.com

Post reply on HN
Print view View original

91–100 of 289 posts

Re: Never connect to ProtonMail using Chrome

#91

Post by lern_too_spel »

lucideer wrote: post #39
maccio92 wrote: post #31

Earlier quoted context omitted.

Right. Google does the first, Facebook did the second

If you're referring to Cambridge Analytica with your Facebook example, Google have provided APIs for 3rd-parties to access private user data for many of it's services, just as Facebook did with Cambridge Analytica. For example, the G Suite Marketplace lets many companies read all of your emails. Both require an auth consent screen with permissions listed, where it may or may not be clear to the user what's being shar…

Only a few thousand people clicked through consent pages to share data specifically with the Cambridge professor who shared data with Cambridge Analytica. Facebook's APIs allowed that professor to then get data about those users' friends, who never made an agreement with that professor. Facebook has since shut down that API. https://techcrunch.com/2015/04/28/facebook-api-shut-down/

Re: Never connect to ProtonMail using Chrome

#92

Post by mikorym »

taneq wrote: post #79

I don't understand how this is related to ProtonMail. It reads more to me like "never use Chrome [if you care about all of your web content being sent to Google]". Sure, ProtonMail is likely to have personal, private stuff in it but so does a bunch of other things, eg. internet banking.

Agreed.

Re: Never connect to ProtonMail using Chrome

#93

Post by Klonoar »

whoisjuan wrote: post #55
Klonoar wrote: post #53

Can't ProtonMail just solve this with a meta tag...?

I don't think that's the point. The problem here is that we seem ro forget that by using Chrome, Google has direct access to absolutely everything we do on the internet. Go to https://myactivity.google.com/myactivity and you will see all the things they track. It's bizarre. The one that pisses me off the most is that they track the apps that I open by binary name and I own an iPhone and use Safari. I don't even know…

...uh huh.

I don't use Chrome, and don't use Google. I'm pretty intimately aware of the point. ProtonMail can still do their part. ;P

Re: Never connect to ProtonMail using Chrome

#94

Post by WA9ACE »

leetbulb wrote: post #29

This is a really awesome project: https://github.com/Eloston/ungoogled-chromium I've really tried to use Firefox... Chrome just runs so much smoother, especially for media.

Obligatory Brave recommendation as well which is built on their own degooglified chromium. They list what they've removed here https://github.com/brave/brave-browser/wiki/Deviations-from-...

Re: Never connect to ProtonMail using Chrome

#95

Post by chmod775 »

taneq wrote: post #79

I don't understand how this is related to ProtonMail. It reads more to me like "never use Chrome [if you care about all of your web content being sent to Google]". Sure, ProtonMail is likely to have personal, private stuff in it but so does a bunch of other things, eg. internet banking.

It's related because that translate feature was disabled for those languages, but Google Chrome decided to disregard that specifically on ProtonMail and send the whole thing to Google servers anyways.

Re: Never connect to ProtonMail using Chrome

#96

Post by po »

taneq wrote: post #79

I don't understand how this is related to ProtonMail. It reads more to me like "never use Chrome [if you care about all of your web content being sent to Google]". Sure, ProtonMail is likely to have personal, private stuff in it but so does a bunch of other things, eg. internet banking.

It's related because it's being reported by a user of ProtonMail into a ProtonMail forum. What you say about it being relevant to just about every page is definitely true.

Re: Never connect to ProtonMail using Chrome

#97

Post by po »

I wish I knew how to effectively communicate to people not to copy paste sensitive data into translate.google.com whenever they need a translation.

Even some dedicated translation apps that you install on your desktop actually upload everything to a 3rd party server for translation. I would love a list of local-only translation software that were close to as effective as the various online options... or even online but with a good data policy.

Re: Never connect to ProtonMail using Chrome

#98

Post by hoffs »

anfilt wrote: post #30
dredmorbius wrote: post #26

Earlier quoted context omitted.

What frequently happens is that a simplified alternative appears. HTML5 rather than XHTML, Markdown vs. HTML or LaTeX, HTML, originally, vs. SGML or Sun's ... proprietary hypertext system (Vue?). Arguably, replacement of much office suite software with Web technologies. Multics -> Unix.

This is true, but a web browser can't really make those choices without a breaking a lot existing stuff. The big problem is that we keep piling onto HTML, CSS, and JS. For instance if we wanted web apps it would have been better to make something separate. Instead we have taken HTML which was originally just a way of rich text formatting and have made into the beast that it is today.

>For instance if we wanted web apps it would have been better to make something separate

But then we need to make another app + browser version? Which defeats the purpose...

Re: Never connect to ProtonMail using Chrome

#99

Post by stedaniels »

marcinzm wrote: post #85

Chrome is fun, today I learned you cannot turn off auto-complete for a page in chrome. Possibly some really creative hacks can do it but those seem to be "fixed" every so often as well. Which is great when you're building a HIPAA compliant page and would prefer that people's medical information not get cached by chrome (and then uploaded to their cloud storage if you're logged in).

URLs should not contain PII data. That is a very bad design.

[Edit] I've got the wrong end of the stick it seems.

Re: Never connect to ProtonMail using Chrome

#100

Post by djsumdog »

cpv wrote: post #71
rinchik wrote: post #10

If you care about privacy these days: Remote self-destructible VM for browsing with Firefox in incognito mode (only sites you NEED to, that REQUIRE JS), through multiple VPNs over multiple proxies. Everything else is command line HTML parsers (also on different, remote VMs), or API endpoints (HN API as an example?). Need email service? Self-hosted, tiny email-server somewhere in eastern Europe. DDNS etc. Local machin…

why eastern Europe?

GDPR rules? Less money for government oversight?
Post reply on HN