Earlier quoted context omitted.
why eastern Europe?
Heh, the Netherlands is enough. No one gets stuff from some of those vps providers.
Netherlands is part of the 14 Eyes...
Never connect to ProtonMail using Chrome
121–130 of 289 posts
Re: Never connect to ProtonMail using Chrome
#122Earlier quoted context omitted.
URLs should not contain PII data. That is a very bad design. [Edit] I've got the wrong end of the stick it seems.
Where did I say URL? I'm talking a POST based form. Put a value into it a text field and Chrome will helpfully save it for future auto-completion. Then it'll upload it to your account on their cloud if you're logged into an account. How do you think it's able to fill out your name, address, etc. on all those web forms?
I'm sorry. I'm out of date it seems. I thought autocomplete="false" worked for non authentication/non common fields. I'll have to check this out in the office later.
Re: Never connect to ProtonMail using Chrome
#123Chrome is fun, today I learned you cannot turn off auto-complete for a page in chrome. Possibly some really creative hacks can do it but those seem to be "fixed" every so often as well. Which is great when you're building a HIPAA compliant page and would prefer that people's medical information not get cached by chrome (and then uploaded to their cloud storage if you're logged in).
So why are you still using Chrome?
He is talking about supporting chrome as a client browser, not using it personally.
Re: Never connect to ProtonMail using Chrome
#124Chrome is fun, today I learned you cannot turn off auto-complete for a page in chrome. Possibly some really creative hacks can do it but those seem to be "fixed" every so often as well. Which is great when you're building a HIPAA compliant page and would prefer that people's medical information not get cached by chrome (and then uploaded to their cloud storage if you're logged in).
It also won't listen when you say "this is not a login field", super fun.
Re: Never connect to ProtonMail using Chrome
#125I’ve said it before: Chrome is a data collection app with a built-in web browser to keep you entertained while it does its real job.
Source? Google makes Chrome because they can default the URL bar to search on Google without paying Traffic Acquisition Costs (Google pays browsers _a lot_ of money to have Google be their default search). Google only makes money from Chrome by driving more traffic to their profit centers (like Search). And it works really, really well. Chrome itself is not monetized and does not collect client data. Please, provide…
Please, provide evidence to the contrary.
Uhhh, this whole article is literally about Chrome exfiltrating personal data to Google... all the evidence is above.
Re: Never connect to ProtonMail using Chrome
#126Earlier quoted context omitted.
"It's a sign that web standards are getting too complicated." Is there precedent for standards significantly simplifying over time, or do they always tend to get more and more complex?
What frequently happens is that a simplified alternative appears. HTML5 rather than XHTML, Markdown vs. HTML or LaTeX, HTML, originally, vs. SGML or Sun's ... proprietary hypertext system (Vue?). Arguably, replacement of much office suite software with Web technologies. Multics -> Unix.
> HTML5 rather than XHTML
Huh? Parsing HTML5 is much more complicated than XHTML, and everything else is about the same.
Re: Never connect to ProtonMail using Chrome
#127I just don't understand how so many people in the HN community, who are so vocal about privacy, turn around and use Chrome. Don't feed the beast.
I have been using Firefox since version 1.0. I don't understand the desire to use google's browser. However, why would even trying view secure data in your web-browser... Not even just Chrome. Things may get cached ect... Although, Mozilla has been doing things that I find annoying at times. Like adding pocket ect... Little Rant Although, I have looked at some of the other forks. What I find more depressing is how fe…
> Those protocols are a lot more complicated than HTTP. So it's much harder for a small group to implement them.
Why does a small group need to reimplement HTTP/2 and HTTP/3? It's important that we have more than 1 or 2 implementations, but we don't need more than a small handful, and we definitely don't need every independent group reimplementing them. We just need enough that anyone who needs it has access to an implementation that's usable for them, whether it's bundled with the OS (such as Apple's Foundation framework including a network stack that supports HTTP/2), or available as a library (such as Hyper for Rust, or I assume libcurl has HTTP/2 support).
Re: Never connect to ProtonMail using Chrome
#128If you care about privacy these days: Remote self-destructible VM for browsing with Firefox in incognito mode (only sites you NEED to, that REQUIRE JS), through multiple VPNs over multiple proxies. Everything else is command line HTML parsers (also on different, remote VMs), or API endpoints (HN API as an example?). Need email service? Self-hosted, tiny email-server somewhere in eastern Europe. DDNS etc. Local machin…
> Remote self-destructible VM for browsing with Firefox in incognito mode (only sites you NEED to, that REQUIRE JS), through multiple VPNs over multiple proxies. I hope you're just joking since layering up multiple VPNs doesn't provide any privacy by design. The best way is to use disposable Whonix VMs in Qubes OS.
I like Qubes but without Rutkowska at the helm, it’s future is uncertain
Re: Never connect to ProtonMail using Chrome
#129Earlier quoted context omitted.
I have been using Firefox since version 1.0. I don't understand the desire to use google's browser. However, why would even trying view secure data in your web-browser... Not even just Chrome. Things may get cached ect... Although, Mozilla has been doing things that I find annoying at times. Like adding pocket ect... Little Rant Although, I have looked at some of the other forks. What I find more depressing is how fe…
> I don't understand the desire to use google's browser. It was the only browser with a decent Javascript sandbox, at least until recently. Wikipedia claims Firefox got a sandbox this month , but I think I've seen earlier claims: > Until November 2018, Firefox was the last widely used browser not to use a browser sandbox to isolate Web content in each tab from each other and from the rest of the system.[120][121]
in practice, the lack javascript sandbox and tab process isolation didn't affect 99% of internet users
Re: Never connect to ProtonMail using Chrome
#130Chrome is fun, today I learned you cannot turn off auto-complete for a page in chrome. Possibly some really creative hacks can do it but those seem to be "fixed" every so often as well. Which is great when you're building a HIPAA compliant page and would prefer that people's medical information not get cached by chrome (and then uploaded to their cloud storage if you're logged in).
This has worked for me for a few years without needing changing (for spelling test, so definitely don't want autocomplete :)
Enter spelling: