Live data from Hacker News

Google no longer providing original URL in AMP for image search results

twitter.com

501–510 of 566 posts

Re: Google no longer providing original URL in AMP for image search results

#501
post #499

Earlier quoted context omitted.

The snippet isn't loaded from their servers when you request it either. Do you think that's a bad idea as well?

yes.

Can you explain? Every time you search, do you want all of the publishers who appear on the results page to know that you were searching? Or is it that you don't want snippets to appear in the search results and just want a list of links without any evidence for why they might be good matches for your query?

Re: Google no longer providing original URL in AMP for image search results

#503

Earlier quoted context omitted.

>A third party can provide delivery like a CDN, but they cannot modify the content, or the signature would no longer match. To make sure I understand, does this mean that in principle a third party other than Google can deliver the AMP pages? Is google working to facilitate that AMP hosting is open to everyone and calibrating their searches point to any and all alternative AMP hosters?

AMP hosting is already open to everyone, and multiple third parties other than Google deliver AMP pages.

Interesting. Are there examples I can search for right now? For instance, are there searches I could do for a news article, that will show an AMP for a CNN article that's on a non-google url? Do you have a ballpark estimate of what percentage of total amps are delivered by non Google domains?

Also how would you reconcile your comment with that of madeofpalk who appears to be treating that possibility as a hypothetical idea that hasn't happened, and which would be unpraticable due to needing to trust third parties?

Re: Google no longer providing original URL in AMP for image search results

#504

Malte Ubl from Google responded via Twitter:[0] > Just heard from the Image Search team that this is an oversight and they'll add the feature! Sorry about that and thanks for the report! [0]: https://twitter.com/cramforce/status/1265688067706245120

Sounds like classic Google "Oops after oops": https://www.zdnet.com/article/former-mozilla-exec-google-has...

Yes $300 million every year to Mozille but WHAT SABOTAGE !

Re: Google no longer providing original URL in AMP for image search results

#505

Earlier quoted context omitted.

Sadly, Ublock Origin is literally the only Firefox extension available on Android atm.

Not quite literal: It's recently up to 6 addons -- the others are https everywhere, privacy badger, noscript, dark reader, and search by image. Note to others: this is about the upcoming rewrite, available as Firefox Preview and Firefox Beta.

Firefox for Android?

I got:

Don't f* with paste, Disable WebRTC, Dark Mode, a couple of image savers, NoScript, AdBlock Plus, Privacy Badger.

I recommend https://filterlists.com/ if you use any blockers, it's an easy way to subscribe to lists.

Re: Google no longer providing original URL in AMP for image search results

#506
post #499

Earlier quoted context omitted.

yes.

Can you explain? Every time you search, do you want all of the publishers who appear on the results page to know that you were searching? Or is it that you don't want snippets to appear in the search results and just want a list of links without any evidence for why they might be good matches for your query?

This is a good example of the contradictions within AMP that limit it's usability as a technology. Unless AMP was really intended as a privacy tool this whole time and I just didn't know it, publishers probably "should" know the same amount they would get to know if you visited one of their actual pages, if you are visiting an AMP for the purpose of consuming their content rather than merely searching for it. But if that disrupts the smooth functioning of AMP, well, now we're just exhibiting an architectural shortcoming that's baked into AMPs philosophy of how to serve content.

>Or is it that you don't want snippets to appear in the search results and just want a list of links without any evidence for why they might be good matches for your query?

Is that how you feel about regular search results?

Re: Google no longer providing original URL in AMP for image search results

#507

Earlier quoted context omitted.

Chrome does enforce the matching signature. Browsers without Signed Exchange support will not likely ever get a signed exchange as they do not advertise support for it in the `Accept` request header.

@freeone3000, that's incorrect, in the case of Signed Exchanges. Chrome will verify the document's signature against the publisher's public certificate. This will be `nytimes.com` for example. It is not using Google's certificate for this verification, and Google does not possess the private key required to modify the content and update the signature.

The actual mechanism by which a signed exchange is implemented is prone to man in the middle attacks by removing the Signature field wholesale. You are not requesting info from nytimes.com, you're requesting info from amp.google.com and trusting that the backing data is accurate. There's no need for a certificate to be presented at ALL! Unless it can be determined that such a header should exist, there's no way to verify its absence.

Re: Google no longer providing original URL in AMP for image search results

#508

Earlier quoted context omitted.

>A third party can provide delivery like a CDN, but they cannot modify the content, or the signature would no longer match. To make sure I understand, does this mean that in principle a third party other than Google can deliver the AMP pages? Is google working to facilitate that AMP hosting is open to everyone and calibrating their searches point to any and all alternative AMP hosters?

When you search for a term on Google.com, should that load request HTTP assets from multiple potentially-untrusted third parties?

How is this reconciled with lern_to_spel's reply to my comment, where they claim this is already implemented and there already are such third parties? Are Google searches right now that use AMP exposing users to risks because they are currently requesting assets from potentially untrustworthy third parties?

Re: Google no longer providing original URL in AMP for image search results

#509
post #375

Earlier quoted context omitted.

> You'll only ever retrieve Google AMP cache results from the Google search page Uh, I keep seeing Google AMP URLs shared on social media, emails, etc etc. Which is quite annoying :(

The AMP team doesn't prefer these URLs shared either: If you click the browser share icon, or trigger the browser native share intent, the origin URL will be shared, not the AMP Cache URL. Only if you explicitly copy the URL bar will the AMP Cache URL be shared. The Signed Exchange spec that AMP has offered sites for a year now allows them to have their own URLs displayed in browsers that support it. In that case, th…

That's really quite useless. I rarely share links by clicking weird "share link" buttons. I usually have half a message already composed in mail/messages/slack, and I just want to cmd-L cmd-C in the browser and cmd-V in the message I'm writing.

Also, "the google.com URL will never be displayed" is a world with an internet I don't want to be a part of.

Re: Google no longer providing original URL in AMP for image search results

#510

Earlier quoted context omitted.

Sounds like classic Google "Oops after oops": https://www.zdnet.com/article/former-mozilla-exec-google-has...

Yes $300 million every year to Mozille but WHAT SABOTAGE !

If you sabotage a competitor so that their market share is irrelevant then you don’t have to pay them as large an amount of cash to make sure their users keep coming your way.
Post reply on HN