Live data from Hacker News

Audible feedback on just how much your browsing feeds into Google

github.com

21–30 of 210 posts

Re: Audible feedback on just how much your browsing feeds into Google

#21
post #20

Earlier quoted context omitted.

> They're not interested in the blobs, but in the people accessing them But if they don't know what the blobs are, how does this help them? What can they tie it to? The latitude and longitude coordinates of my current location have an sha1 hash of 0950e97d3a2e4839e39ad27deb2e852d498100ae. Is this useful information?

Don't you need a proprietary firebase SDK in your app to use it? Do you know what data are included in the requests? I would argue that anything as simple as IP + UA/OSidentifier can be of interest to Google

I've just been using XMLHttpRequest and the Firebase REST API, no SDK. I imagine Google can see the IP address, but I think that's it?

(This is my first time building anything that involves a "backend", so I am pretty new to this!)

Re: Audible feedback on just how much your browsing feeds into Google

#22
post #12

Earlier quoted context omitted.

> But I can't imagine Google would know how to do anything useful (to them) with my random JSON blobs. They're not interested in the blobs, but in the people accessing them. Their whole suite of "free" developer tools (google analytics, google fonts, firebase, ...) are just a means to get information about what people do online.

> They're not interested in the blobs, but in the people accessing them But if they don't know what the blobs are, how does this help them? What can they tie it to? The latitude and longitude coordinates of my current location have an sha1 hash of 0950e97d3a2e4839e39ad27deb2e852d498100ae. Is this useful information?

If the requests are client side, they know that the user has accessed your domain. They can analyze the frequency and timestamps of these requests and add that information to the ad profile they have built for that user.

Re: Audible feedback on just how much your browsing feeds into Google

#23
post #13

A common explanation I get from people with poor digital hygiene is that they do not see how it is affecting them. Making the imperceptible perceptible is a great concept for more innovations. I have sent the kids in my house logs for their devices from the DNS blocker I have running on our network, but it was too much for them to digest. Perhaps I should work on a visualization tool of all the data that shows impact…

Maybe you could make a game out of it. The one with the least amount of request each (or whatever metric works) gets rewarded in some way and give them a dashboard to check progress. Not sure what negative side effects that could cause though, but i see some positives like using less social media, or learning how to cheat the system in clever ways.

> Not sure what negative side effects that could cause though, [...]

Sneakily use the other kid's device to browse?

Re: Audible feedback on just how much your browsing feeds into Google

#24
post #12

Earlier quoted context omitted.

> But I can't imagine Google would know how to do anything useful (to them) with my random JSON blobs. They're not interested in the blobs, but in the people accessing them. Their whole suite of "free" developer tools (google analytics, google fonts, firebase, ...) are just a means to get information about what people do online.

> They're not interested in the blobs, but in the people accessing them But if they don't know what the blobs are, how does this help them? What can they tie it to? The latitude and longitude coordinates of my current location have an sha1 hash of 0950e97d3a2e4839e39ad27deb2e852d498100ae. Is this useful information?

At a minimum they could build cohorts of people who use your app and use that as a bit of information for ad targeting.

The SHA-1 thing is a complete non-sequitur, but since you asked, small amounts of data run through unsalted SHA-1 can be brute-forced very easily if someone cared find out where you are.

Re: Audible feedback on just how much your browsing feeds into Google

#25

Earlier quoted context omitted.

> They're not interested in the blobs, but in the people accessing them But if they don't know what the blobs are, how does this help them? What can they tie it to? The latitude and longitude coordinates of my current location have an sha1 hash of 0950e97d3a2e4839e39ad27deb2e852d498100ae. Is this useful information?

At a minimum they could build cohorts of people who use your app and use that as a bit of information for ad targeting. The SHA-1 thing is a complete non-sequitur, but since you asked, small amounts of data run through unsalted SHA-1 can be brute-forced very easily if someone cared find out where you are.

> The SHA-1 thing is a complete non-sequitur

Sorry about that. I just couldn’t figure out where GP was going.

Re: Audible feedback on just how much your browsing feeds into Google

#26

Perhaps I missed it but a video (with audio, presumably) of this working would be helpful.

https://twitter.com/bert_hu_bert/status/1561466204602220544

Exactly what I was looking for, thank you!

Re: Audible feedback on just how much your browsing feeds into Google

#27

Earlier quoted context omitted.

> They're not interested in the blobs, but in the people accessing them But if they don't know what the blobs are, how does this help them? What can they tie it to? The latitude and longitude coordinates of my current location have an sha1 hash of 0950e97d3a2e4839e39ad27deb2e852d498100ae. Is this useful information?

In isolation, no. But given enough other actors that use the same firebase + can be tracked by adsense, they can infer connections useful for targeting you.

I'm not sure why you're being downvoted, because that's exactly what they're doing.

Do people really think Google just gives away things for free because they're being nice?

Re: Audible feedback on just how much your browsing feeds into Google

#29
post #5

Or alternatively, you can send all the traffic destined to google, into dev-null instead: U=https://raw.githubusercontent.com/berthubert\ /googerteller/main/goog-prefixes.txt for i in $(wget -qO - $U); do ip route add unreach $i done ...but you'd be surprised how many of seemingly unrelated places on the Internet would break without google.

Yeah, their captcha is everywhere for starters. Obviously a lot of other deps too.

And Google fonts?

Re: Audible feedback on just how much your browsing feeds into Google

#30
post #27

Earlier quoted context omitted.

In isolation, no. But given enough other actors that use the same firebase + can be tracked by adsense, they can infer connections useful for targeting you.

I'm not sure why you're being downvoted, because that's exactly what they're doing. Do people really think Google just gives away things for free because they're being nice?

> Do people really think Google just gives away things for free because they're being nice?

No, I assumed they gave the low tier away for free so people would eventually upgrade to the higher tiers.

Post reply on HN