Never connect to ProtonMail using Chrome

Post by codedokode » Tue, Nov 20, 2018, 11:43 AM UTC

mcintyre1994 wrote: post #155

codedokode wrote: post #141

I would make the advice more general: avoid dealing with Google. Recently I had to install Hangouts app on the Android phone (it was easier than using it on desktop because I don't have the latest Chrome). One has to register a Google Account in order to use it, and I had to answer a lot of questions as if I was applying for a visa, including a phone number (of course I used a fake number) and date of birth. Then the…

If you have Google Play installed (doesn't matter if you ever use it) then you'll also have Play Framework or whatever they call it, and that probably has permission to just about everything. If you have an Android phone and don't trust Google then what their apps ask for seems a bit irrelevant - you've almost certainly already given them whatever you don't want them to have.

Post by scandinavian » Tue, Nov 20, 2018, 11:47 AM UTC

rocqua wrote: post #161

cromwellian wrote: post #112

When I visit a website in a foreign language I've never translated before, Chrome asks my permission to translate the site, it doesn't do so automatically. You could argue they could give you more details on what it will do when you click the 'Translate' button, but to argue they shouldn't offer the feature as a permission-requested option at all seems pretty extreme. I read a lot of foreign websites, and the built-i…

Question is, how does it know to ask? If it is based on analysis done by the local machine, no problem. However, if it is based on analysis done by google servers, big problem!

Post by brohee » Tue, Nov 20, 2018, 11:56 AM UTC

Dylan16807 wrote: post #178

brohee wrote: post #153

Earlier quoted context omitted.

The issue with XHTML is not parsing, it's generating valid one. The internet got years to try, failed, time to switch to something else... Because parsing invalid XHTML, which all browsers ended doing, is more complicated than parsing HTML5...

It's pretty easy to generate a valid XHTML doc. The issues come when someone is editing by hand and doesn't care. > Because parsing invalid XHTML, which all browsers ended doing, is more complicated than parsing HTML5... I don't understand what you mean. Isn't the non-strict parser for XHTML just the normal HTML parser? The complication levels should be equal.

Post by viraptor » Tue, Nov 20, 2018, 12:05 PM UTC

codedokode wrote: post #175

creato wrote: post #147

Earlier quoted context omitted.

I just went to create a google account to see for myself because this sounds egregiously bad. I think you are exaggerating quite a bit: * Phone number is clearly marked as optional and it says they use it for security. (Of course, Facebook said the same thing, and look how that turned out...) * The only information requests that I think are unnecessary are date of birth (they say because some services are age restric…

UPDATE: Location sharing is off by default. > Phone number is clearly marked as optional That is because your IP has a good reputation. For me registering a Gmail Account from Firefox looks like this [1]. Note that the text is misleading (this is not for my security, this is to prevent bulk registration). > date of birth (they say because some services are age restricted) If the user is over 18 you don't really need…

Post by throwawaylolx » Tue, Nov 20, 2018, 12:06 PM UTC

Waterluvian wrote: post #117

rinchik wrote: post #10

If you care about privacy these days: Remote self-destructible VM for browsing with Firefox in incognito mode (only sites you NEED to, that REQUIRE JS), through multiple VPNs over multiple proxies. Everything else is command line HTML parsers (also on different, remote VMs), or API endpoints (HN API as an example?). Need email service? Self-hosted, tiny email-server somewhere in eastern Europe. DDNS etc. Local machin…

The sarcasm is spot on. These things are so easy to a tiny subset of experts who seem incapable of stepping into the shoes of normal people. It's always frustrating when I want to improve privacy or security and it's just an "easy" but not actually, mess. Let's Encrypt is probably the great example of actually getting it right. But normal people won't really ever need it.