Live data from Hacker News

maps.google.com now redirects to google.com/maps

garrit.xyz

301–310 of 396 posts

Re: maps.google.com now redirects to google.com/maps

#302

Earlier quoted context omitted.

SNI is still in the plaintext.

It it still an improvement; you need to DPI the traffic then, which is more demanding than just logging 53/udp queries.

Anyone who is trying to invade your privacy is going to do DPI.

My prosumer grade harder does DPI without any issue.

Re: maps.google.com now redirects to google.com/maps

#303

A bit reason for using separate subdomains originally is because there are security benefits. If there is an XSS attack that leaks cookies from Google Keep, you would prefer that not get your cookie for Google Maps. As browser security models have evolved, subdomains are no longer as isolated as top level domains, so I dunno...

I think the main issue here is people conflate the security boundaries defined by the website operators with the security or privacy boundaries a user might want to enforce. The web origin chosen for the service operator's XSS sandbox is not necessarily what a privacy-focused user wants. It's only useful when a trustworthy operator is designing for the benefit of the user.

There should really be a more granular way for the user's policy to adjust the origin definitions used for cross-origin logic as well as other types of content blocking and enforcement.

Why shouldn't a user be able to isolate https://example.com/app1 as much as https://app1.example.com?

Why shouldn't they be able to grant any permission to be used in a single page https://example.com/app1/usefulpage and not in other pages on the site?

The multi-container approach to browser session isolation faces the same issues. Different users may have different preferences for when navigation shares the session and when navigation should kick you into a new session that lacks authentication, tracking, or app state.

Re: maps.google.com now redirects to google.com/maps

#304
post #290

Earlier quoted context omitted.

No, google-analytics.com is where analytics is being served from and sends tracking-requests to.

It also connects to https://stats.g.doubleclick.net/j/collect

I believe that's only if the GA account is connected to an Ads account (or set up to collect demographics, I think). By itself, GA will only use https://www.google-analytics.com/j/collect (or /g/collect for GA4).

Re: maps.google.com now redirects to google.com/maps

#305

Earlier quoted context omitted.

I understand your point, but anyway, no app, no browser should ever think that "it knows better" and attempt to fix what it considers incorrect. It may think that it protects the user, but in reality, it will break what the user configured. Private DNS zones are common, and if the browser ignores user configured DNS, they will break. And as I wrote elsewhere, just because the machine is configured to use 53/udp for a…

If a general purpose browser can empower hundreds of millions or even billions of regular users with better privacy (and ultimately, security) by making a change that might disrupt a small handful of power users who manually configure this stuff, I say the browser should go for it. The power users are the very people who can, without much effort at all, reconfigure their stuff, or easily find a special purposed brows…

The problem I fear is the needs of the few who are not technology minded, don't want their browser (or in their eyes their internet connection) to stop working because their ISP issued router uses a DNS based captive portal to onboard people (I've seen this used by atleast one major ISP in the UK to on-board devices onto their per-device content filtering system - BT, however I think they rolled back on that after it was caused issues with IOT devices).

However I believe (not read the docs in a while) FireFox works around this by falling back to DNS if an issue with DoH is detected.

EDIT: However I'm still on the fence if it should be a browser decision. Yes browsers move more quickly then OS & ISP changes and can make things better for the masses quickly, but i'm also wary of those changes screwing up the avg person, the people like my mother who can just about order things online via her ipad but thats about it, if she accidentally lowers the screen brightness of her ipad I soon get a call about it. Its for those kind of people I don't like the idea of a browser messing around with a connection in unknown network conditions.

Re: maps.google.com now redirects to google.com/maps

#308

Earlier quoted context omitted.

I think the concern is more about when Google is able to collect said data, not whether it's shared or not. I don't have location enabled for Google maps in the browser, but if I did, then presumably Google could collect that data also when I'm just searching for a website.

But isn’t collected/shared inherently the same thing here?

No, what they are talking about is all Google properties (eg Google search) now being able to collect your location every time you use them, if you granted permission for maps to get your location.

So it’s now not possible to block location for search, and grant it to maps (at least using the standard browser domain permissions model).

https://support.google.com/chrome/answer/114662?hl=en&co=GEN...

Re: maps.google.com now redirects to google.com/maps

#309
post #292

I recall from my time in Google Geo years ago that the idea of integrating Search and Maps was a big part of the "New Maps" release that happened around 2014. The rumor I heard was that someone (possibly even Larry himself) wanted to be able to have interactive maps directly on the search results page, so that the navigation from a search query to a map wouldn't involve even a page reload. So the big Maps frontend re…

> It's also possible that someone is trying to increase the percentage of searches that have location information, that doesn't seem terribly far-fetched either, and I can imagine lots of ways people could try to rationalize it as actually benefiting users. Could you speak more to how this kind of thing figuratively plays out? With privacy on most of our (tech-focused) minds, I’m mostly curious how openly an initiati…

It's easy to rationalize it as benefiting the users, so I'd imagine it's an explicit OKR, maybe even a few levels up in the org.

Like, one thing I've wanted on occasion is the ability to search for brick and mortar stores in a given radius who have the thing I want -- either because I want to physically inspect it before committing to a purchase or because for whatever reason the time/cost of shipping wouldn't be practical.

That sort of query is hard for Google to serve right now though for reasons including the lack of relevant location information in both the search results and the queries whose user behavior would help drive relevance rankings for those location-specific results.

Location information is a bit of a double-edged sword too though, even ignoring privacy concerns. I have to spoof my location and change my search language to get some results because of aggressive filtering happening behind the scenes. If a given query doesn't match Google's current understanding of the user then the right results existing in the corpus often won't imply that the user is able to find them with _any_ search operators.

Re: maps.google.com now redirects to google.com/maps

#310

I recall from my time in Google Geo years ago that the idea of integrating Search and Maps was a big part of the "New Maps" release that happened around 2014. The rumor I heard was that someone (possibly even Larry himself) wanted to be able to have interactive maps directly on the search results page, so that the navigation from a search query to a map wouldn't involve even a page reload. So the big Maps frontend re…

It is absolutely bizarre to me how half-assed Google is with integrating its products.

I have a week of events coming up in Google Calendar each with a different event location. Why can't I see a map of all those event locations alongside the calendar with all the same event details listed? Why can't I associate a Google Calendar event with a specific album or set of photos in Google Photos and see those in the map and calendar as well?

This is why I'm building https://visible.page with my brother. We have all these capabilities of visualizing data on the web, yet no one has actually put them together in a convenient and consumer friendly way to visualize any type of information together in one place.

All these big tech companies seem to just give up on any kind of significant innovation as soon as they reach a certain level of monopoly on their market. Twitter, Spotify, Facebook, Google, etc. I can think of a dozen significant feature experiments they could try that would make my daily life better using those tools yet they don't.

Post reply on HN