Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GDPR penalty for passing on of IP address to Google by using Google Fonts

rewis.io

Post reply on HN
Print view View original

111–120 of 656 posts

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#111

Post by Aeolun »

brtkdotse wrote: post #17
HatchedLake721 wrote: post #3

So an HTTP GET request to another domain (fonts.googleapis.com) "leaked" website visitor's IP address to Google. What the hell? Google Translate: https://rewis-io.translate.goog/urteile/urteil/lhm-20-01-202... > The defendant is sentenced to pay the plaintiff €100.00 > The plaintiff has a claim against the defendant to refrain from passing on the plaintiff's IP addresses to Google under Section 823 (1) in conjunction…

Running a website in Germany seems like a god damned nightmare: https://allaboutberlin.com/guides/abmahnung-creative-commons

And they decided to pay? FFS… well, that was certainly educational.

It has a very chilling effect on innovation no doubt.

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#112

Post by krehl »

Youden wrote: post #80
questiondev wrote: post #68

Earlier quoted context omitted.

that is true but it increases the barrier to entry for those who use google fonts for system resource issues, a lot of people offload because they don’t have the space or money to self host everything one could argue that it is less eco friendly as well given how much space is going to be used repeating the same file on a multitude of servers

A $5 VPS comes with several gigabytes of storage. A standard web font (e.g. Roboto) is ~1MB. Bandwidth is essentially free through CloudFlare. Who doesn't have the space or money to self-host their fonts?

This as well would "leak" the IP address to Cloudflare, wouldn't it?

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#113

Post by mro_name »

iqonq wrote: post #77
ZeroGravitas wrote: post #67

Earlier quoted context omitted.

When talking about UX, there's this bad habit of using people's mothers or grandmothers as examples, because they are 'too stupid' to understand the UI that was built. Aside from the obvious problems, this also implicitly removes blame from the designer/implementor of the interface. I always prefer to reframe it as someone with a very important, intelligence requiring job, say vaccine reasearcher, who doesn't have ti…

Quoted post unavailable.

the car example again.

There is a legal framework that has certain requirements. Enforced by a court here. These laws are from elected representatives of the people.

So they are binding. Like it or not.

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#114

Post by capableweb »

robin_reala wrote: post #81
brtkdotse wrote: post #56

Earlier quoted context omitted.

Look and learn from Yubico, they don’t show any YouTube embedded videos until you agree to functional cookies: https://www.yubico.com/?lang=sv

There’s an easier way than that: embed from youtube-nocookie.com. Of course that doesn’t necessarily help with the Munich ruling…

IP information will still be sent to Google, and a notice would have to put up before.

Easiest way to deal with this is to self-host the videos. Most people over-estimate how popular their websites are, and for the ones who don't, getting a dedicated instance with unmetered bandwidth is trivial to get and setup for video-hosting.

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#115

Post by Vespasian »

onli wrote: post #73
Vespasian wrote: post #59

Earlier quoted context omitted.

Do you have a link. I read that recently this specific scam was picking up steam in the US and was concerned about the implications here in Germany.

Yeah, I think https://www.rechtambild.de/2018/09/kein-schadensersatz-bei-c... references the decision I was remembering.

Awesome. Thanks

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#116

Post by asadkn »

Curious how useful is an IP address with a simple HTTP get request?

As long as a sane Referer-Policy is set, the Referer won't be sent. Sure there's a lot more to browser fingerprinting but with just an HTTP request, all the data that would be known from it is the language and the user agent. Both of which are not unique data points and shared by thousands of other users. No cookies either in this case of Google Fonts.

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#117

Post by cuu508 »

questiondev wrote: post #68
brtkdotse wrote: post #36

Earlier quoted context omitted.

I too was pissed about the popups until I realized it the companies throwing up the popups that are to blame. Hosting all your assets by yourself, on your own servers and doing analytics without sending data to a third party is not a terribly tall order.

that is true but it increases the barrier to entry for those who use google fonts for system resource issues, a lot of people offload because they don’t have the space or money to self host everything one could argue that it is less eco friendly as well given how much space is going to be used repeating the same file on a multitude of servers

> one could argue that it is less eco friendly as well given how much space is going to be used repeating the same file on a multitude of server

Browsers don't share cache between sites: https://www.stefanjudis.com/notes/say-goodbye-to-resource-ca...

Re: GDPR penalty for passing on of IP address to Google by using Google Fonts

#120

Post by mro_name »

iqonq wrote: post #77
ZeroGravitas wrote: post #67

Earlier quoted context omitted.

When talking about UX, there's this bad habit of using people's mothers or grandmothers as examples, because they are 'too stupid' to understand the UI that was built. Aside from the obvious problems, this also implicitly removes blame from the designer/implementor of the interface. I always prefer to reframe it as someone with a very important, intelligence requiring job, say vaccine reasearcher, who doesn't have ti…

Quoted post unavailable.

and: many are forced to use the www if they like it or not. E.g. for tax or to get access to public services.

So there's no excuse for hostility but it has to be legal and layperson-friendly.

Post reply on HN