Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Never connect to ProtonMail using Chrome

old.reddit.com

Post reply on HN
Print view View original

201–210 of 289 posts

Re: Never connect to ProtonMail using Chrome

#201

Post by rocqua »

dogecoinbase wrote: post #47
moderation wrote: post #42

Earlier quoted context omitted.

I've seen a number of comments about http/2 and http/3 being driven by Google. The ideas originated there (SPDY and QUIC respectively) but in both cases many different entities backed the ideas and formulated specifications in IETF settings. I'm not sure I buy that somehow Google managed to hoodwink the people that toiled on these specifications in a non-Google environment and managed to influence them in such a way…

Cloudflare seem to be big backers of http/3 [1]. Having the second-largest traffic analyzer on board would seem like more of a cautionary negative than a positive to me.

I don't think cloudfare really does traffic analysis. At least nowhere near the level that google does. It is not their core business.

Re: Never connect to ProtonMail using Chrome

#202

Post by dhimes »

codedokode wrote: post #141

I would make the advice more general: avoid dealing with Google. Recently I had to install Hangouts app on the Android phone (it was easier than using it on desktop because I don't have the latest Chrome). One has to register a Google Account in order to use it, and I had to answer a lot of questions as if I was applying for a visa, including a phone number (of course I used a fake number) and date of birth. Then the…

Jesus that is such a god-awful dark pattern. It kinda breaks my heart to read this. I guess I'm locked into the iphone ecosystem for a while, despite their exorbitant prices. Sigh.

Too bad that Ubuntu phone died on the vine.

Re: Never connect to ProtonMail using Chrome

#203

Post by auslander »

AlexCoventry wrote: post #86
anfilt wrote: post #5

Earlier quoted context omitted.

I have been using Firefox since version 1.0. I don't understand the desire to use google's browser. However, why would even trying view secure data in your web-browser... Not even just Chrome. Things may get cached ect... Although, Mozilla has been doing things that I find annoying at times. Like adding pocket ect... Little Rant Although, I have looked at some of the other forks. What I find more depressing is how fe…

> I don't understand the desire to use google's browser. It was the only browser with a decent Javascript sandbox, at least until recently. Wikipedia claims Firefox got a sandbox this month , but I think I've seen earlier claims: > Until November 2018, Firefox was the last widely used browser not to use a browser sandbox to isolate Web content in each tab from each other and from the rest of the system.[120][121]

> It was the only browser with a decent Javascript sandbox

What about Safari? IMHO it has strong sandboxing. Another interesting thing I found, is sharing cookie access between private tabs, Safari does not, Chrome does.

Re: Never connect to ProtonMail using Chrome

#204

Post by auslander »

rocqua wrote: post #201
dogecoinbase wrote: post #47

Earlier quoted context omitted.

Cloudflare seem to be big backers of http/3 [1]. Having the second-largest traffic analyzer on board would seem like more of a cautionary negative than a positive to me.

I don't think cloudfare really does traffic analysis. At least nowhere near the level that google does. It is not their core business.

Why then they offer free fully functional CDN-like service, free SSL ? Data is new oil, and CF has all data in plaintext - your logins/passwords included.

Re: Never connect to ProtonMail using Chrome

#206

Post by pbhjpbhj »

mikorym wrote: post #173
po wrote: post #96

Earlier quoted context omitted.

It's related because it's being reported by a user of ProtonMail into a ProtonMail forum. What you say about it being relevant to just about every page is definitely true.

Then the title should reflect this. At the moment the title seems to imply (wrongly) that this is something specific to ProtonMail. I took the comment to be about clarity.

That's a problem of HN site norms. Mods here specify that titles shouldn't be altered by the submitter.

IMO there should be an original title and an edited title (and users could optionally display only one title of they requested) ... but then there's lots I'd change ...

Re: Never connect to ProtonMail using Chrome

#207

Post by morganvachon »

codedokode wrote: post #181
mcintyre1994 wrote: post #155

Earlier quoted context omitted.

If you have Google Play installed (doesn't matter if you ever use it) then you'll also have Play Framework or whatever they call it, and that probably has permission to just about everything. If you have an Android phone and don't trust Google then what their apps ask for seems a bit irrelevant - you've almost certainly already given them whatever you don't want them to have.

I had Google Play, but I didn't have Google Account set up on the phone. And it is not like I have much choice - iPhones are overpriced (I don't think is is a good idea to spend over $600-900 for just a phone) and even less open and I trust Apple as much as Google.

> I trust Apple as much as Google

I trust Apple more when it comes to privacy, because there is hard proof they are more trustworthy. Note that I'm not saying they can be trusted 100%, but they are far, far better at protecting their users' privacy than Google. Of course, that's a given considering Google's entire existence is based on selling your information to advertisers, whereas Apple makes their money when you buy their hardware.

Honestly, there is no practical way to not end up in some company's database somewhere unless you eschew all 20th and 21st century tech, live in a cave, and forage for food. Even then you're bound to end up in a news story on the Internet if you're ever spotted, even if it's just Weekly World News talking about another Bigfoot sighting.

Re: Never connect to ProtonMail using Chrome

#208

Post by vectorEQ »

vectorEQ wrote: post #205

don't use web browsers, they can see the web pagess you can see :O:O:O:O

you might seem this is shocking, but it make the request and parse the content handle the encryption for you. literally access to all of the bits! :O really! if u care about privacy don't use web browser!

Re: Never connect to ProtonMail using Chrome

#209

Post by morganvachon »

ohthehugemanate wrote: post #170

RTFA - the user discovered that chrome was sending all text from all webpages to the translate service. The advice in the thread isn't "never connect to protonmail using Chrome." It's "don't use Chrome". 100% agree. Firefox is so good now, there's really no excuse.

And if you don't like Firefox Quantum for its own egregious privacy issues, you can use Waterfox. The next major Waterfox release will have all the speed enhancements of Firefox Quantum without the privacy issues.

Re: Never connect to ProtonMail using Chrome

#210

Post by morganvachon »

codedokode wrote: post #145
rinchik wrote: post #10

If you care about privacy these days: Remote self-destructible VM for browsing with Firefox in incognito mode (only sites you NEED to, that REQUIRE JS), through multiple VPNs over multiple proxies. Everything else is command line HTML parsers (also on different, remote VMs), or API endpoints (HN API as an example?). Need email service? Self-hosted, tiny email-server somewhere in eastern Europe. DDNS etc. Local machin…

This doesn't prevent hotels you've stayed at, car dealers, utility companies, banks, ISPs and others from selling your data. Also, in Russia (and many other countries as well) you cannot legally buy a SIM card without an ID. And Digital Ocean doesn't accept some virtual debit cards and suggests that I use a real credit card (so that they can charge me even if I don't have money).

So, don't use Digital Ocean? They are far from the only fish in the sea[1]. Vultr stands out, they offer Bitcoin and WeChat Pay as alternative payment options to the usual Paypal and credit card methods, and they have an awesome ISO library that includes OpenBSD. They aren't the only provider with those options but they are my go-to.

[1] https://lowendbox.com/

Post reply on HN