Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Where Am I? NYTimes or Google?

theinternetbytes.com

Post reply on HN
Print view View original

211–220 of 381 posts

Re: Where Am I? NYTimes or Google?

#211

Post by xg15 »

gregable wrote: post #69
skybrian wrote: post #58

Earlier quoted context omitted.

It seems like there is a risk that an old version of a bundle will get served instead of a new one by an arbitrary host? Maybe the bundle should have a list of trusted mirrors?

There is a publisher selected expiration date as part of the signed exchange which the client inspects. The expiration also cannot be set to more than 7 days in the future on creation. This minimizes, but of course does not eliminate, this risk.

It also makes signed exchanges completely unusable for delivering packages offline. (E.g. the USB stick scenario)

What a bummer.

Re: Where Am I? NYTimes or Google?

#212

Post by xg15 »

Clausinho wrote: post #197
gorgoiler wrote: post #195

With the utmost respect to you and the other commenters here, when I see positivity about the abstract, hypothetical technical merits of something with a long history of, in practice, being part of an extremely controversial power play it reminds me a lot of the comments I see promoting a widely installed piece of process management software — one which a lot of people don’t really want, whose subtle changes to layer…

I'm out of the loop, care to elaborate which PM software you are referring to?

I guess he was referring to systemd.

Re: Where Am I? NYTimes or Google?

#214

Post by jevgeni »

gorgoiler wrote: post #195

With the utmost respect to you and the other commenters here, when I see positivity about the abstract, hypothetical technical merits of something with a long history of, in practice, being part of an extremely controversial power play it reminds me a lot of the comments I see promoting a widely installed piece of process management software — one which a lot of people don’t really want, whose subtle changes to layer…

That first paragraph is a single sentence... Tried understanding what you are saying a couple of times and I just can’t.

Re: Where Am I? NYTimes or Google?

#215

Post by Kiro »

saagarjha wrote: post #186
Kiro wrote: post #160

AMP is disliked by privileged people who have never experienced how truly awful browsing the web with a bad internet connection can be.

Perhaps they instead see the “solution” to be problematic.

Yes, but not acknowledging the problem and that AMP is a solution, even if it's the wrong solution, defeats any meaningful discussions. We need something like AMP but outside of Google's control.

My point is that it's so easy to just see the drawbacks and none of the benefits when you're sitting on a good connection. All threads on HN becomes completely one-sided where everyone is just backslapping each other's complaints.

Re: Where Am I? NYTimes or Google?

#216

Post by rpastuszak »

Jabbles wrote: post #198
rpastuszak wrote: post #196

Earlier quoted context omitted.

Remember when Google was telling us that third-party cookies are there to protect us, and Safari/Firefox/Edge are just reckless and pose a risk to users by blocking them?

Please provide a link, I could only find this, which suggests Google has reversed course: https://www.techradar.com/uk/news/google-is-phasing-out-thir...

> By undermining the business model of many ad-supported websites, blunt approaches to cookies encourage the use of opaque techniques such as fingerprinting (an invasive workaround to replace cookies), which can actually reduce user privacy and control.

https://blog.chromium.org/2020/01/building-more-private-web-...

I'm going to copy paste my older comment on this:

I find their "removing 3rd party cookies will incentivise businesses to rely on fingerprinting" discourse dangerous.

It implies that other browser vendors (Mozilla, Safari/WebKit, new Edge) are in fact making the Web a more dangerous place.

I believe it's dangerous because it creates a harmful, unproductive PR narrative—people might just assume this is a true statement, without learning about both sides of the problem. I'm not trying to strip anyone of agency, I just don't think most of my friends would have time to research this topic and might decide to follow the main opinion instead.

The answer I'd like to hear: Yes, it does push some actors towards fingerprinting, but preventing fingerprinting should be dealt with regardless. Changes should happen both on legislative and browser-vendor level.

Re: Where Am I? NYTimes or Google?

#217

Post by Jabbles »

rpastuszak wrote: post #216
Jabbles wrote: post #198

Earlier quoted context omitted.

Please provide a link, I could only find this, which suggests Google has reversed course: https://www.techradar.com/uk/news/google-is-phasing-out-thir...

> By undermining the business model of many ad-supported websites, blunt approaches to cookies encourage the use of opaque techniques such as fingerprinting (an invasive workaround to replace cookies), which can actually reduce user privacy and control. https://blog.chromium.org/2020/01/building-more-private-web-... I'm going to copy paste my older comment on this: I find their "removing 3rd party cookies will incent…

Thank you for the additional background.

Re: Where Am I? NYTimes or Google?

#218

Post by dillonmckay »

remexre wrote: post #139
CGamesPlay wrote: post #125

Earlier quoted context omitted.

I believe you might be misunderstanding the idea behind signed exchanges. To be clear, Signed Exchanges are how AMP should have worked all along. example.com generates a content bundle and signs it. Google.com downloads the bundle and decides to mirror it from their domain. Your browser downloads the bundle from google.com, and verifies that the signature comes from example.com. Your browser is now confident that the…

I think the concern was more that if I can XSS example.com, Google is now serving that for some period of time after example.com's administrators notice + fix this. (In the absence of a mechanism to force AMP to immediately decache the affected page(s), that is.)

Yes, at what point does example.com lose control of their content and for how long?

Re: Where Am I? NYTimes or Google?

#219

Post by bamboozled »

What happened to The Internet? Honestly.

Google should can do this stuff if they like...on their own network in their own ecosystem.

Insane that they got rich from hyperlinks and now want to fiddle with the so others can't.

Post reply on HN