Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bunny fonts – privacy respecting drop-in replacement for Google Fonts

fonts.bunny.net

Post reply on HN
Print view View original

291–300 of 346 posts

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#291

Post by [deleted] »

fritigern wrote: post #53
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

[deleted]

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#292

Post by rossjudson »

ncmncm wrote: post #233
rrdharan wrote: post #189

Earlier quoted context omitted.

I see this completely the opposite. There’s much more risk to Google to be lying about the privacy agreement applicable to Google Fonts ( https://developers.google.com/fonts/faq#what_does_using_the_... ) than there is to some unknown company that won’t be a target for regulators and won’t make any news for casually violating your privacy through shoddy engineering work or incompetence let alone maliciousness.

I perceive exactly zero risk to Google in lying about literally anything at all. Have you ever heard about them being even slightly inconvenienced in response to any abuse?

Do you feel like providing any examples?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#293

Post by rossjudson »

skybrian wrote: post #182
TheRealPomax wrote: post #173

Earlier quoted context omitted.

No, and yes, respectively. If you consider "Google recording and monteizing on CORS URL requests" speculation, I'm not sure you know much about the company we're talking about here. They've been sued and fined over tracking quite a number of times. Do we know whether bunny.net is any better? In the abstract, no we don't, but we're not dealing in abstracts, so we actually do because of where they operate. A real Europ…

I used to work at Google and I'm sure I don't know how most of it works, outside the area I worked in. It's a big company and the systems are complex. Why do you think you know how it works? What do you actually know about Google that doesn't come from outside speculation? That link says that a website leaked an IP address to Google. It doesn't say that Google did anything with the IP address.

I never cease to be amazed at the number of people who make self-validating proclamations about what Google does or doesn't do, without having any information to support their positions.

I guess I'll say what I always say: Look at the public privacy statements for Google, or for a particular Google product. If you have any evidence that Google does anything different from what's in that statement, contact Google and there will definitely be people interested in figuring out what's going on and fixing it.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#294

Post by rossjudson »

jefftk wrote: post #40
johnchristopher wrote: post #37

Earlier quoted context omitted.

> Google Fonts logs records of the CSS and the font file requests, and access to this data is kept secure. and https://www.theregister.com/2022/01/31/website_fine_google_f... leads me to believe that Google has PI when people visit sites using google fonts. Even if they don't use it for advertising purposes long term log keeping is not required to serve fonts. It doesn't really matter what the service is doing, they…

"by including Google-Fonts-hosted font on its pages, passed the unidentified plaintiff's IP address to Google without authorization and without a legitimate reason for doing so" It isn't about whether the IP address was logged, but about whether it was sent. Which is an unavoidable aspect of loading a resource from a server.

Does that mean that any web page that loads a resource from any other location on the web would be fined the same way?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#295

Post by ncmncm »

rossjudson wrote: post #292
ncmncm wrote: post #233

Earlier quoted context omitted.

I perceive exactly zero risk to Google in lying about literally anything at all. Have you ever heard about them being even slightly inconvenienced in response to any abuse?

Do you feel like providing any examples?

Lack of examples,you mean?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#296

Post by popcube »

hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

if their allocated at Europe, this maybe make sense

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#297

Post by maccolgan »

rmbyrro wrote: post #257
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

Can someone point out a good reason for not downloading the font files and serving them directly from your CDN or servers, without any calls to third-parties in your HTML?

Google Fonts does serve a different font based on the user agent. Depending on things like hinting and stuff. Bunny fonts would help solve that problem.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#298

Post by lmz »

nyanpasu64 wrote: post #77
hsjdbdksjsj wrote: post #46

Earlier quoted context omitted.

you won't believe this, but as the end user you can solve this in your life once and for all, and also improve your life! something rare for online annoyances nowadays. any decent browser, i mostly use firefox, have a checkbox in the font screen that prevents sites from changing the page font. i set all sites to user Ubuntu Mono. always. all the time. everywhere. the only downside are sites that use winding-like font…

I used to disable font overrides altogether. Another failure mode of that mode is that the omnipresent Material Icons displays words (the font contains ligatures replacing words with icons) instead of icons.

A word sounds much better than a random character.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#299

Post by webmaven »

nvr219 wrote: post #273
citizenkeen wrote: post #272

Earlier quoted context omitted.

What is the bikeshed?

"Organizations spend disproportionate time on trivial issues" - cn parkinson not sure how it's relevant here though

> not sure how it's relevant here though

As I understood the answer, the expanded version would be "the only disadvantage is having to spend an unreasonable amount of time arguing about this issue, which will drag on forever since it is relatively minor."

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#300

Post by zzo38computer »

hsjdbdksjsj wrote: post #46
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

you won't believe this, but as the end user you can solve this in your life once and for all, and also improve your life! something rare for online annoyances nowadays. any decent browser, i mostly use firefox, have a checkbox in the font screen that prevents sites from changing the page font. i set all sites to user Ubuntu Mono. always. all the time. everywhere. the only downside are sites that use winding-like font…

I also configure it to prevent sites from changing the page font. However, if a fix pitch font is requested, then it should always use a fix pitch font to display the text (even if it is not the same font as was requested), and I would want PDF and SVG to support loading fonts, but not HTML. However, there does not seem to be a setting for that.
Post reply on HN