Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

To download from Google Drive, you must enable third party cookies?

support.google.com

Post reply on HN
Print view View original

61–70 of 166 posts

Re: To download from Google Drive, you must enable third party cookies?

#61

Post by shadowgovt »

squidbeak wrote: post #55
sneak wrote: post #19

Earlier quoted context omitted.

I don't see any problems with a monoculture of rendering engine. Browser (and features, especially privacy ones), absolutely. Renderer, not so much.

You've forgotten what it was like at the turn of the century. It took a long while for us to break the previous monoculture and clear the way for the innovation we've enjoyed since.

The innovation we've enjoyed since was mostly caused by Google getting tired of waiting for either Microsoft or Mozilla to improve on the browser paradigm and footing the bill to roll their own.

Re: To download from Google Drive, you must enable third party cookies?

#62

Post by nickjj »

rpadovani wrote: post #41
nickjj wrote: post #26

Earlier quoted context omitted.

Is this also another case for hosting your main site on www.example.com instead of example.com? This way you could have cookies only on www.example.com while hosting user generated content on assets.example.com or whatever sub-domain you want that's not www?

Yes and no: one thing I totally forgot to mention is phishing. You don't want to give any semblance of endorsement to user-generated contents: many viewers will check only the main domain, due to how browsers' URL bars hide stuff. Having a total different domain help highlighting that it is not official content.

Makes sense.

There's probably some benefits around blacklists too.

For example if a user uploaded questionable content to assets.example.com/uploads, such as pirated content then someone could submit that to search engines and other lists to get your domain blacklisted. It's quite possible these blacklists could be related to the apex domain, not necessarily the sub-domain. A separate domain guarantees your apex domain won't get penalized.

Re: To download from Google Drive, you must enable third party cookies?

#63

Post by robin_reala »

jhanschoo wrote: post #50
gorgoiler wrote: post #25

Earlier quoted context omitted.

Have you ever used a service in life where there is no competition? Straight up lack of competition examples are the easiest: DMV, airport food court, buying beer at a sports stadium etc. If you work in tech then you’ve probably had to use software over whose purchase you had no control: Jira, PeopleHR, Taleo, Concur. There’s no competition there because you, the end user, don’t have the option to choose from a free…

The argument needs to be more subtle to make sense, since Blink is open-source, whereas IE was not. Contrarily, I see another analogy; Blink being like Linux's dominance in infrastructure.

The Linux Foundation aren’t trying to develop Linux to cement their advertising business. The Linux Foundation are benign, and Google aren’t.

Re: To download from Google Drive, you must enable third party cookies?

#64

Post by Nextgrid »

jefftk wrote: post #33

This is wrong: try downloading something with Safari, which blocks third party cookies by default, and it works fine. Instead, the problem is that downloading from Google Drive is using User-Agent sniffing to determine whether third party cookies are expected to be enabled, and choosing between implementations. (Disclosure: I used to work at Google, but I don't know anything internal on this)

Oh wow - so while there was a non-malicious explanation in another comment (https://news.ycombinator.com/item?id=32149130), this clearly looks like malicious behavior.

They're relying on the fact that most browsers lack per-domain cookie controls to force Google Drive users to allow third-party cookies knowing full well the majority won't remember (or bother) to disable them after.

Re: To download from Google Drive, you must enable third party cookies?

#65

Post by II2II »

jefftk wrote: post #33

This is wrong: try downloading something with Safari, which blocks third party cookies by default, and it works fine. Instead, the problem is that downloading from Google Drive is using User-Agent sniffing to determine whether third party cookies are expected to be enabled, and choosing between implementations. (Disclosure: I used to work at Google, but I don't know anything internal on this)

I'm not sure if blocking third party cookies is the cause, but I have had difficulty downloading files under Firefox. Disabling third party cookies is one of the first settings I enable after installing Firefox.

I would not be surprised if Apple makes an exception for Google.

Re: To download from Google Drive, you must enable third party cookies?

#66

Post by haunter »

wanderingmind wrote: post #32

If using linux or mac, just FUSE mount with rclone. If you need more privacy,load the mount with encryption so google has no idea about the files you are working with.

That’s not limited to Linux or macOS at all, works perfectly under Windows too

Re: To download from Google Drive, you must enable third party cookies?

#67

Post by mynameismon »

jefftk wrote: post #33

This is wrong: try downloading something with Safari, which blocks third party cookies by default, and it works fine. Instead, the problem is that downloading from Google Drive is using User-Agent sniffing to determine whether third party cookies are expected to be enabled, and choosing between implementations. (Disclosure: I used to work at Google, but I don't know anything internal on this)

I don't think this is the issue. I use Vivaldi, blocking third party cookies by default, and I was unable to download before I disabled third party cookies temporarily.

Re: To download from Google Drive, you must enable third party cookies?

#68

Post by jeromegv »

Forgeties79 wrote: post #57
giancarlostoro wrote: post #17

Earlier quoted context omitted.

Honestly anyone concerned about a Chrome / WebKit browser monopoly needs to use Firefox now if you already are not.

What are your thoughts on brave browser? I’ve used it over firefox for about two years now and I really enjoy it.

Brave is just chrome underneath so you’re definitely not helping to browser diversity.

Re: To download from Google Drive, you must enable third party cookies?

#69

Post by jefftk »

II2II wrote: post #65
jefftk wrote: post #33

This is wrong: try downloading something with Safari, which blocks third party cookies by default, and it works fine. Instead, the problem is that downloading from Google Drive is using User-Agent sniffing to determine whether third party cookies are expected to be enabled, and choosing between implementations. (Disclosure: I used to work at Google, but I don't know anything internal on this)

I'm not sure if blocking third party cookies is the cause, but I have had difficulty downloading files under Firefox. Disabling third party cookies is one of the first settings I enable after installing Firefox. I would not be surprised if Apple makes an exception for Google.

> I would not be surprised if Apple makes an exception for Google.

Apple doesn't, which you can verify with developer tools in Safari.

Re: To download from Google Drive, you must enable third party cookies?

#70

Post by GTP »

jefftk wrote: post #35
GTP wrote: post #18

And from their solution: "Type chrome://settings/cookies in the browser address bar" I love how they assume everybody uses Chrome.

It's only broken on Chrome, though. In Safari it works fine without third party cookies.

This is interesting, are you sure your browser isn't making an exception for google drive?
Post reply on HN