Do people still seriously download fonts? I turn that crap off.
Bunny fonts – privacy respecting drop-in replacement for Google Fonts
61–70 of 346 posts
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#62Earlier quoted context omitted.
That hasn’t worked for a while. Browsers will NOT use cached resources loaded for foo.com when loading bar.com, even if they are the same resource from the same CDN.
Can you provide a link to support / verify this?
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#63I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…
> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…
I always had the suspicion that the (seemingly higher) interest in privacy/FOSS in Europeans is fueled partly by anti-Americanism. In America, even if you don't trust the government, at least it's your government, so I don't feel like that plays as big a role, and any interest in privacy/FOSS (like mine) is untempered by the anxiety of an alien government's interference. :p Regardless, I love how much more Europeans seem to value privacy.
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#64Firefox > Settings > General > Fonts > Advanced Uncheck "Allow pages to choose their own fonts, instead of your selections above" No remote fonts anywhere.
Breaks lots of icons and such right? I disabled fonts for like a day with Ublock Origin but it was too inconvenient
Just close the offending site and never, ever return. Works wonderfully!
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#65I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…
> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…
How do the laws play out in practice? If bunny.net started storing user agent and IP address information indefinitely, and someone complained, how likely is it enforcement action is actually enacted on them? It seems such a low-impact privacy violation would be a waste of time for a GDPR/etc agency to focus on compared to things like ad companies selling location data.
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#66Earlier quoted context omitted.
I am often tempted to push this further to: sudo bash -c 'echo ":: google.com" >> /etc/hosts' sudo bash -c 'echo "0.0.0.0 google.com" >> /etc/hosts'
What exactly do you believe doing this will accomplish, other than cutting off access from a search engine?
Stops the biggest advertiser from profiling you on every site, obviously.
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#67On the font pages, they use this as the example sentence: > The quick brown bunny jumps over the lazy dog. While the site is trying to be quirky and cute, replacing 'fox' with 'bunny' doesn't showcase what 'f' and 'x' look like.
Wrote a quick Python script to explore alternatives. The best I found with two words was: - The quick brown bunny jumps over the lazy podgy fox. If you want to do it with one word you can do: - The quick brown bunny jumps over the oversexualized dragonfly.
I propose:
The quick brown bunny jumps over the lazy dog, here, fixed.
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#68I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…
It seems okay to me for the case of google. Since Google-owned sites, Adsense, Gmail, and Google Analytics are so ubiquitous, things like a font download are trivially easy for Google to correlate to your other activity. There's much less value for BunnyCDN to abuse it, because they don't have the critical mass of your other activity. Yes, just serving up your own fonts is better, but this is an improvement that seem…
For both bunny.net and Google Fonts, using a CDN is useless with the advent of timing attacks related to the browser cache https://news.ycombinator.com/item?id=24894135. Storing fonts on the same domain avoids a DNS lookup and extra TCP connection.
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#69I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…
> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…
Surely you realize that if a modern sophisticated government wants to see your data, they are going to be able to access it, even if it’s stored in the Netherlands? What threat are you protecting yourself against?
Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts
#70Earlier quoted context omitted.
That hasn’t worked for a while. Browsers will NOT use cached resources loaded for foo.com when loading bar.com, even if they are the same resource from the same CDN.
Can you provide a link to support / verify this?