Live data from Hacker News

Bunny fonts – privacy respecting drop-in replacement for Google Fonts

fonts.bunny.net

121–130 of 346 posts

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#121

Do not use this, use Google Fonts, just self-host them. This site claims better privacy, but does so using the wrong solution since you still have to trust them. Self host (supported by Google Fonts but not by this service): - Better privacy - Better performance (no extra DNS lookups, TLS connection) Their default embed code is a CSS @import directive. These must never be used in production code (It's fine as a direc…

> Leads to FOUC and FOIT.

What are those acronyms?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#122

Earlier quoted context omitted.

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

Surely you realize that if a modern sophisticated government wants to see your data, they are going to be able to access it, even if it’s stored in the Netherlands? What threat are you protecting yourself against?

> What threat are you protecting yourself against?

Against modern sophisticated governments who are busy, lazy, distracted to ask Netherlands to give them my data. I'm not exactly a high priority target. All I have to do is to make it a little harder for them to access my data.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#123

Earlier quoted context omitted.

https://en.wikipedia.org/wiki/Five_Eyes?wprov=sfti1 In the US at least, any spying is illegal when both parties are within the US and the packets never leave the US.

And, who ever got executed for spying domestically? Who ever got a prison sentence in line with the rough prison sentences the US happily gives out for much lesser offenses? Wo ever got so much as a bad performance review? Noone? Why am I not surprised?

Who has been executed for violating GDPR?

Laws can be enforced without executing people.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#124
post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

Would you trust a Switzerland based company that uses GCP or AWS?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#125
post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

We can reasonably assume that bunny.net doesn't also correlate, cross-link, and permanently store which sites our IPs visit, for the purposes of enhanced ad delivery. Which Google does: that's literally what every single service they offer does in addition to "the thing you need that service for". Even sites that don't offer Google ads or Google analytics _still provide Google with behavioural data linked to you_ by using Google fonts.

So no, this is not one of those examples, this is a great example of someone setting up a service to remove all those free, extra data points that Google harvests. Today it's fonts. Maybe tomorrow, it's the rest of their "it's not explicitly Google Analytics" offerings.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#126

Do not use this, use Google Fonts, just self-host them. This site claims better privacy, but does so using the wrong solution since you still have to trust them. Self host (supported by Google Fonts but not by this service): - Better privacy - Better performance (no extra DNS lookups, TLS connection) Their default embed code is a CSS @import directive. These must never be used in production code (It's fine as a direc…

> Leads to FOUC and FOIT. What are those acronyms?

Flash of Unstyled Content and Flash of Invisible Text.

* FOUC: when you see content in the wrong font, then it switches to the correct font, sometimes leading to page layout jumps.

* FOIT: when you see _no_ text content because the desired font is missing with no fallbacks/the CSS directed not to use fallbacks. Once the font loads, page layout might jump.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#127

Earlier quoted context omitted.

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

I'm a European and I have very little trust in European governments. Not much trust in the US government, either.

I'm an American and I have next to zero trust for governments in general. "Absolute power corrupts absolutely" and humanity has given too few entirely too much "absolute power". I feel much the same about most of the massive corporate entities as well.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#128
post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

Unless you're under a totalitarian government, spies aren't really interested in most people's data. Data brokers, on the other hand, are willing to sell anything they can profit from.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#129
post #126

Earlier quoted context omitted.

> Leads to FOUC and FOIT. What are those acronyms?

Flash of Unstyled Content and Flash of Invisible Text. * FOUC: when you see content in the wrong font, then it switches to the correct font, sometimes leading to page layout jumps. * FOIT: when you see _no_ text content because the desired font is missing with no fallbacks/the CSS directed not to use fallbacks. Once the font loads, page layout might jump.

Here the definition is actually broader than FOUC just for the font part. It can cause rendering without any CSS

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#130
post #114

Earlier quoted context omitted.

People are talking about the possibility of being spied on by governments. I think if you’re targeted by government or intelligence agencies, then even self hosting most likely won’t save you from them. What is important here, and why these laws matter, is how trivial it is to get access to your data, or for companies to sell your data. That’s why I appreciate the European’s effort to have better laws for our privacy…

Goverments and intelligence agencies can't target everyone. But they can gather data for future use. So if you don't give them your data you won't be targeted in the future.

This goes both ways, the lack of the usual amount of data about you is a data point in itself.

`SELECT * from citizens where data_points And then somebody aims a botnet armed with zero-days in your direction. But yeah, that requires dedicated adversaries that actually notice you -- which is not a given, I'll agree.

Post reply on HN