Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bunny fonts – privacy respecting drop-in replacement for Google Fonts

fonts.bunny.net

Post reply on HN
Print view View original

241–250 of 346 posts

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#241

Post by ajsnigrutin »

anyfoo wrote: post #223
ajsnigrutin wrote: post #217

Earlier quoted context omitted.

There are many ways to solve this issues, and EU chose one of the worst ones, that for most people doesn't help at all.

Sounds good, can you name a few ways? I'm being serious. If there are better ideas, which there probably are, let's put them out there.

Client side blocking (by that I mean removing them after the tab/page close)? First for third party cookies, then for all of them, and add a "button" next to the url bar, to enable cookies for that specific site (to allow logins).

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#242

Post by KennyBlanken »

ByteJockey wrote: post #227
fritigern wrote: post #53

Earlier quoted context omitted.

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

> I don't think Americans and American companies understand how little trust rest of us have for the American government. Have you... have you seen our politics? What makes you think that we think other people trust our government? We don't trust our government. Hell, it's trusted so little that one of our large political parties is basically entirely devoted to making sure that the government can't get anything done…

That political party's actions are about weakening the federal government so as to make it easier for large corporations to behave abusively, not because of trust. States have less resources, and can be played against each other.

The public-facing excuse for Joe Q Public is "they can't be trusted!", "less taxes on your hard-earned money" (when corporate share of taxes has plunged from the 50-50 split it used to be, increasing individual taxes), "the government is not efficient" (usually because of lots of onerous regulations and reporting and oversight that, ahem, a certain political party insisted on to fight "abuse")

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#243

Post by kube-system »

fritigern wrote: post #240
kube-system wrote: post #236

Earlier quoted context omitted.

The number of governments that have not had to deal with ethics concerns is exactly zero. Rather than drawing a broad hand-wavy link between ethics concerns and respect for privacy, you'd be much more accurate in measuring privacy by directly considering their practical legal frameworks that protect privacy. > A country who has been killing people in various wars/invasions is unlikely to behave ethically when it come…

> The number of governments that have not had to deal with ethics concerns is exactly zero. Some are worse than others. America is one of the worst. War, invasions, mass surveillance, mass incarcaration...

This is simply not factual, it is an information availability bias. America is one of the most publicized nations, and sunlight is one of the best disinfectants. By any academically rigorous measure, the US ranks high in ethics, along with most other western style democratic systems.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#244

Post by geraneum »

dorgo wrote: post #114
geraneum wrote: post #80

Earlier quoted context omitted.

People are talking about the possibility of being spied on by governments. I think if you’re targeted by government or intelligence agencies, then even self hosting most likely won’t save you from them. What is important here, and why these laws matter, is how trivial it is to get access to your data, or for companies to sell your data. That’s why I appreciate the European’s effort to have better laws for our privacy…

Goverments and intelligence agencies can't target everyone. But they can gather data for future use. So if you don't give them your data you won't be targeted in the future.

This is a good point. I would say we shouldn’t make it easy for the governments to access the data as well as private interest or companies. These are not mutually exclusive.

EU privacy laws are a step in the right direction. It’s progress. We can build on it.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#246

Post by fritigern »

kube-system wrote: post #243
fritigern wrote: post #240

Earlier quoted context omitted.

> The number of governments that have not had to deal with ethics concerns is exactly zero. Some are worse than others. America is one of the worst. War, invasions, mass surveillance, mass incarcaration...

This is simply not factual, it is an information availability bias. America is one of the most publicized nations, and sunlight is one of the best disinfectants. By any academically rigorous measure, the US ranks high in ethics, along with most other western style democratic systems.

Tell that to the people that were killed by American military in Iraq, Afganistan, Libya, Syria, Pakistan, Yemen and probably other places I am forgetting.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#247

Post by kube-system »

fritigern wrote: post #246
kube-system wrote: post #243

Earlier quoted context omitted.

This is simply not factual, it is an information availability bias. America is one of the most publicized nations, and sunlight is one of the best disinfectants. By any academically rigorous measure, the US ranks high in ethics, along with most other western style democratic systems.

Tell that to the people that were killed by American military in Iraq, Afganistan, Libya, Syria, Pakistan, Yemen and probably other places I am forgetting.

This has nothing to do with internet privacy.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#248

Post by fritigern »

kube-system wrote: post #247
fritigern wrote: post #246

Earlier quoted context omitted.

Tell that to the people that were killed by American military in Iraq, Afganistan, Libya, Syria, Pakistan, Yemen and probably other places I am forgetting.

This has nothing to do with internet privacy.

Of course it does.

A country like America that has been murdering people in many wars around the world without hesitation is unlikely to take my privacy seriously. They don't respect my right to live, do you think they will respect my right to privacy?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#249

Post by blip54321 »

jfk13 wrote: post #211
blip54321 wrote: post #171

If it were me, I'd make third-party font sources require a SHA hash. In pseudocode: url("https://fonts.googleapis.com/comic-sans", sha="abcd1234") This way: - If my browser has comic-sans cached, no request is made - Caching works even if the same resource is sourced from multiple places (e.g. I can host comic-sans locally, but if they got it from a CDN, they don't need to get it again) - If a malicious site replaces…

Sounds like you're basically reinventing SRI: https://en.wikipedia.org/wiki/Subresource_Integrity One issue with cross-site caching, though, is that it may enable timing-based attacks on privacy.

No, I'm not reinventing it, but extending it by:

1) Mandating it for certain types of resources

2) Extending caching to cover the cross-site case.

Can you please explain the proposed timing-based attack?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#250

Post by chrismorgan »

zerocrates wrote: post #206
chrismorgan wrote: post #198

Earlier quoted context omitted.

The particular stacks advocated by that site aren’t particularly good (though they’re not all that bad either). It was discussed at https://news.ycombinator.com/item?id=31543054 a few weeks ago. I would scrap at least Avenir Next, Avenir, Helvetica Neue, Helvetica, Ubuntu, Roboto, Noto, Arial, Apple Garamond, Times New Roman, Droid Serif, Times, Source Serif Pro, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Mo…

Most actual versions of this kind of thing out in the wild have Roboto; what's your reasoning for wanting to exclude it? "Inferior"?

Superfluous: it’s there for Android, but I believe that sans-serif will normally resolve to that anyway.

(I’m not certain about that, and can’t confirm it as I don’t have ready access to Chrome on Android but I got the impression some years ago that Chrome on Android uses the system font, which is Roboto. But even apart from that, the general idea is “stop specifying specific fonts and let the browser do its thing and the user get their chosen fonts, unless what the browser does by default is too bad, like Courier New for monospace”.)

Post reply on HN