Live data from Hacker News

Bunny fonts – privacy respecting drop-in replacement for Google Fonts

fonts.bunny.net

331–340 of 346 posts

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#331
post #91

Earlier quoted context omitted.

...and the other 10,000 sites you interact with per year? I realize security posture is about layers, but this is pointless.

It's not for privacy's sake! I leave that to Privacy Badger. I just prefer having pages load quickly and don't generally think custom fonts improve the experience.

Ah. I see. But doesn't blocking Google's CDN create all kinds of functionality problems on non-google sites.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#332

Earlier quoted context omitted.

Why not? Make encrypted backups with `borg` and use `rclone` to distribute them to a number of free cloud storage services -- this is what I and many others do. One of my destinations is Yandex Disk. They all only see an encrypted Borg repo. And in the next few weeks or months I'll make sure they won't even be seeing that. Just a few opaque files several tens of megabytes big each. I wish them luck cracking it, lol.…

We are talking about saas, will you put your photos there? Or use yandex email?

Contrary to the weird Cold War sensibilities that rule a lot of HN's collective mindset for some reason, to me using Yandex Mail is no worse than using GMail.

Let's be honest: all those big players sing all our data to whoever they like, any moment they like. Pretending one is better than another is dishonest.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#333
post #328

Earlier quoted context omitted.

> And we can thank EU for the extremely annoying cookie pop-up’s on every website. I've never heard anybody who wasn't in or adjacent to the tech surveillance industry complain about this.

It probably had 0.01% effect on their profits so I don't see why they would be upset.

>I don't see why they would be upset.

Feigning ignorance. People in or adjacent to the tech surveillance industry (either working in it or having a substantial portion of their net worth invested in the industry) whine about cookie consents constantly, but nobody else gives a shit.

Are you telling me that you have no financial or professional stake in the matter? You haven't worked for or invested in a company that profits from tracking people online? Nor any of your friends or family?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#334
post #312

Earlier quoted context omitted.

A growing number of websites support dark mode theming, but not all of them. When I open a page in reader mode and switch to dark theme, I don't expect logos in the text to fade into the background. Svg is also often much larger than a font file, especially one that's subset. While it's not svg or on the open web, I have a particular hate for sborn.jpeg in ebooks, as I read my ebooks in dark mode at night and having…

> Svg is also often much larger than a font file, especially one that's subset. Subsetting is where SVG shines, though. For icon fonts, you can much more easily subset SVG icons than a font file. Font file subsetting needs dedicated tools like font editors (with Icomoon being a common choice these days) and often manual maintenance/upkeep, whereas SVG tree shaking is a natural part of any web bundler (webpack, etc) a…

I use Calibre for font subsetting, usually for use in ebooks, but I've used it for a website as well. The only gotcha I've found is that Calibre doesn't recognize css content attributes (`div.icon{content:"source:"}`), and that font names need to be correct. This is pretty trivial to get around, and generally only needs to be done once.

I've never used webpack or any other bundler on any personal website I've written, nor have I ever used react or other heavy frameworks (I used jQuery when I was in school). Perhaps these are useful on larger websites, but I prefer to avoid scripts in general, with the sole exception being scripts that parse a data source to generate a page client-side (most pages on my system are static, so I don't even have php or such installed). To me, automation means I make changes to the html on my server and reload the page.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#335
post #280
post #146

Earlier quoted context omitted.

The difference is Europe is better at restricting corporate overreach than the US is, regardless of how similar their governments have become. That said, I'd take almost any European government over any US government of my entire lifetime, especially when it comes to actually enacting privacy legislation. I couldn't care less about web fonts though. I'm not downloading them from Google or "bunny.net" or anywhere else…

Here are the GDPR fines: https://www.enforcementtracker.com/ Enacting legislation is one thing. Somalia is excellent at enacting gun control legislation.

One must enact legislation before one can enforce it.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#336

Earlier quoted context omitted.

And it's such a niche privacy issue too. I would gladly take a shared cache over cache isolation. Especially for something used on as many sites as Google Fonts is.

You may be interested in the LocalCDN extension [1] which tries to solve the privacy vs speed issue for common resources by intercepting known remote resource requests and returning a local copy. 1: https://www.localcdn.org/

It looks like it's only "officially" supported on Firefox, but I'll give it a try. Thanks.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#337

Earlier quoted context omitted.

Do you feel like providing any examples?

See https://news.ycombinator.com/item?id=31810185 .

Status of that, two years on, appears to be complaints that Google is violating its discovery obligations.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#338

Earlier quoted context omitted.

> Better performance Counterbalanced by the fact that if you just throw any old random font file on your server, it'll quite possibly be larger (in some cases considerably so) than necessary. So now you need to subset/split up the font files yourself, which takes some extra work (and the various online subsetting tools I've found often don't allow proper control over which OpenType typographic features to keep, somet…

It's super trivial to outsource the sub setting to Google Fonts. Just request their CSS and curl the font files referenced in it. If that is too tedious, build a small proxy.

Fair enough, if you only want to avoid Google for the hosting you could just copy their fonts and be done with it, yes.

(And in my case that whole effort wasn't actually so much for philosophical reasons, i.e. to try avoiding to use Google at all costs, but rather because Google Fonts was serving an outdated version of the font I was wanting to use, and was missing either some additional characters or bug fixes that were only added in a more recent version.)

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#339

Earlier quoted context omitted.

That political party's actions are about weakening the federal government so as to make it easier for large corporations to behave abusively, not because of trust. States have less resources, and can be played against each other. The public-facing excuse for Joe Q Public is "they can't be trusted!", "less taxes on your hard-earned money" (when corporate share of taxes has plunged from the 50-50 split it used to be, i…

> That political party's actions are about weakening the federal government so as to make it easier for large corporations to behave abusively, not because of trust. Can you think of a reason people would do that if they didn't trust those corporations more than the federal government?

Sure: because the corporations pay more than the federal government.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#340
post #331

Earlier quoted context omitted.

It's not for privacy's sake! I leave that to Privacy Badger. I just prefer having pages load quickly and don't generally think custom fonts improve the experience.

Ah. I see. But doesn't blocking Google's CDN create all kinds of functionality problems on non-google sites.

Actually, it's only Google's sites I've seen it cause problems on, because some of their documentation makes use of icon fonts served from that CDN. Other sites have no problems in my experience. The font fallback works fine.
Post reply on HN