Live data from Hacker News

Never connect to ProtonMail using Chrome

old.reddit.com

231–240 of 289 posts

Re: Never connect to ProtonMail using Chrome

#231

I would make the advice more general: avoid dealing with Google. Recently I had to install Hangouts app on the Android phone (it was easier than using it on desktop because I don't have the latest Chrome). One has to register a Google Account in order to use it, and I had to answer a lot of questions as if I was applying for a visa, including a phone number (of course I used a fake number) and date of birth. Then the…

This looks like a good reminder that Google isn't just a loose bunch of tools, they have developed a full integrated ecosystem. If it's not what you want then it is overly intrusive and exceptionally hard to manage so you control just the functionality and personal security you want. Most end users, I think, just want something to work and are happy for all the magic to just happen. When you embrace it a lot of what…

I find I can replace just about everything Google makes except for Google Docs & Google Sheets. I wish I could find self-hosted, open-source versions of those, which I would install on my own server. I can just use desktop apps and sync the files through my server with git or rsync when I'm the only user (but using multiple clients), but as you're saying about the general public, for sharing with friends and family, Google's solution works so much better....

Re: Never connect to ProtonMail using Chrome

#232

Earlier quoted context omitted.

> date of birth required US law has some requirements on accounts created by minors which essentially means you must check the age for people creating new accounts, and you must not allow accounts for people I don't entirely understand where exactly this applies, i.e. why you can create accounts on some sites without giving your age. It might only apply in some telecommunication accounts cases, or maybe (possibly mor…

But if the user is over 18 then you need only the year without month and day.

If the user is 17.8 years old you need the month. If the user is 17.95 years old, you need the day.

Re: Never connect to ProtonMail using Chrome

#233

This is a really awesome project: https://github.com/Eloston/ungoogled-chromium I've really tried to use Firefox... Chrome just runs so much smoother, especially for media.

Mostly I believe it's just because I've been using Firefox for so long, but Chrome always felt a bit off. The developer tools was just a little worse, the GUI was a bit more annoying, the spell checker only works if can actually spell the words to begin with. Most people seem to prefer Chrome, and Chrome derived browsers though.

Re: Never connect to ProtonMail using Chrome

#234
post #128

Earlier quoted context omitted.

> Remote self-destructible VM for browsing with Firefox in incognito mode (only sites you NEED to, that REQUIRE JS), through multiple VPNs over multiple proxies. I hope you're just joking since layering up multiple VPNs doesn't provide any privacy by design. The best way is to use disposable Whonix VMs in Qubes OS.

I like Qubes but without Rutkowska at the helm, it’s future is uncertain

1. This is orthogonal to the topic at hand. If you only trust a project with Joanna Rutkowska at the helm, neither Qubes nor any "desktop" system out there offers what you want.

2. The Qubes team has been doing a great job so far, and Joanna has not been directly involved for about a year now. Marek and Andrew Wong are the ones I notice the most on the mailing list and on github, but there is a big team[1] that has gotten Qubes to where it is today.

[1] https://www.qubes-os.org/team/

Re: Never connect to ProtonMail using Chrome

#235
post #48

Earlier quoted context omitted.

This is an odd question. If you can think of reasons where they're non-equivalent, why not state those reasons in your comment? You're asking me to give counter-examples to examples/explanations you haven't given.

Well, that's pretty much my problem. The only reasons I can think of would pretty much be the two you've already listed (and explicitly said it's not equivalent for those purposes). This isn't some gotcha thing, I'm trying to understand these concerns better, because I really don't. I'm not asking for "counter-examples" to anything, I'm just asking for examples. It's not an odd question.

Ah, ok, apologies; I didn't realise those two items I listed were your only reasons.

The main reasons people are concerned for privacy, I would say, are around influence and personal autonomy. There are plenty of people (many of them on HN, I've read many comments here to this effect), who want to cede decision-making about their own consumption to service-providers. There is an attractive convenience to this. Privacy advocates are typically not these people, and are concerned not just for their own individual autonomy, but also often motivated by broader societal concerns like those discussed by Pariser (obviously a hot topic right now w.r.t. Trump and Putin), as well as less-political aspects of selective exposure theory around societal trends.

Re: Never connect to ProtonMail using Chrome

#236

Earlier quoted context omitted.

> date of birth required US law has some requirements on accounts created by minors which essentially means you must check the age for people creating new accounts, and you must not allow accounts for people I don't entirely understand where exactly this applies, i.e. why you can create accounts on some sites without giving your age. It might only apply in some telecommunication accounts cases, or maybe (possibly mor…

> I don't entirely understand where exactly this applies, i.e. why you can create accounts on some sites without giving your age. That law is called COPPA ("Children Online Privacy Protection Act"). It applies to sites dedicated to children (as per https://www.ftc.gov/tips-advice/business-center/guidance/com... ). As Google uses one and the same account for all its services including YouTube, all Google accounts are…

You need to be at least 13 to use Google or YouTube, so they don't have to respect the intricacies of COPPA.

Re: Never connect to ProtonMail using Chrome

#237

Earlier quoted context omitted.

Why then they offer free fully functional CDN-like service, free SSL ? Data is new oil, and CF has all data in plaintext - your logins/passwords included.

Because... a. It's really cheap for us to offer that service b. Lots of those free customers end up upgrading, paying for extras, etc. Between a and b offering the free service makes sense. We make money from the customers who pay us for our service ( https://www.cloudflare.com/plans/ ), not from doing something nefarious with data. We'd be shooting ourselves in the foot if we did because that data is our customers d…

The plaintext thing is just too sensitive, and your free service offer makes the reach too wide. Could you be compelled, by warrant, to provide all plaintext traffic from a single user IP?

Re: Never connect to ProtonMail using Chrome

#238
post #225

RTFA - the user discovered that chrome was sending all text from all webpages to the translate service. The advice in the thread isn't "never connect to protonmail using Chrome." It's "don't use Chrome". 100% agree. Firefox is so good now, there's really no excuse.

Unfortunately, Firefox makes my MacBook Pro frying-pan hot whenever a web page is a serious, JavaScript-heavy web app (e.g., Google Docs, Twitter, prob any significant desktop app in web app form) or anything with a lot of moving images (video, D3, any sort of "visualization"). Chrome and Safari run cool and comfortable. So, I would just use Safari, except that as a dev, I need the vastly superior dev tools, extensio…

Firefox runs cool on my bottom of the range, pre-2018 Air, with a few exceptions: Slack, the new Gmail (not classic). The new Gmail interface pushed me back to the old days of native IMAP clients, and Slack runs hot on Chrome so I'm between a rock and a hard place there.

Furthermore, we're discussing a major con of using Chrome in this thread, so I'd be happy to take a minor trade-off or two to avoid that (especially if that trade-off is partly down to Google crippling their own service perf-wise in non-Google browsers).

What kind of sites are taxing Firefox other than the well-known offenders? Given you're on Pro and I've no issues with an Air, it's likely a GPU issue that could be remedied with some config tweaks.

Re: Never connect to ProtonMail using Chrome

#239

I would make the advice more general: avoid dealing with Google. Recently I had to install Hangouts app on the Android phone (it was easier than using it on desktop because I don't have the latest Chrome). One has to register a Google Account in order to use it, and I had to answer a lot of questions as if I was applying for a visa, including a phone number (of course I used a fake number) and date of birth. Then the…

Also I have experimented a little and found something more. If I delete Google Account from the phone, force stop Hangouts, clear its cache and try to log in with that account again, Hangouts shows this screen [1] with "Back up to Google Drive" option enabled again.

I tried twice - and every time Google sets this option on by default even if I had disabled it previous time.

Of course, this might be not intentional - maybe the enable sync flag is not stored at Google server.

[1] https://i.imgur.com/7XjfCst.png

Re: Never connect to ProtonMail using Chrome

#240
post #5

Earlier quoted context omitted.

I have been using Firefox since version 1.0. I don't understand the desire to use google's browser. However, why would even trying view secure data in your web-browser... Not even just Chrome. Things may get cached ect... Although, Mozilla has been doing things that I find annoying at times. Like adding pocket ect... Little Rant Although, I have looked at some of the other forks. What I find more depressing is how fe…

"It's a sign that web standards are getting too complicated." Is there precedent for standards significantly simplifying over time, or do they always tend to get more and more complex?

In the particular case of web standards, my impression is that some companies that develop browsers (1) tie individual performance evaluations (e.g. bonuses) to whether the engineer has added stuff to standards and (2) _really_ like over-engineering things. The effect on web standards has not been good.
Post reply on HN