Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bunny fonts – privacy respecting drop-in replacement for Google Fonts

fonts.bunny.net

Post reply on HN
Print view View original

231–240 of 346 posts

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#231

Post by ncmncm »

_fat_santa wrote: post #59
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

> If you embed a font hosted somewhere else you expose some of your user data to them. Now with fonts there's a really simple solution: Just don't. As an added bonus, hosting fonts on your own server is faster as it goes through the same HTTP connection. I never quite understood the debate around fonts. You could use the CSS/Link import that Google provides, but that's never the optimal solution. Like you I always do…

On Firefox desktop, I force literally all fonts -- serif, sans, what-have-you -- to Linux Libertine. Dingbats can look odd, but you get used to that.

For reasons I am sure I will never fathom, browsers on mobile provide all the same settings options, and religiously ignore them.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#232

Post by richdougherty »

While we're talking about privacy and CDN delivery, check out Decentraleyes. It's a browser extension which keeps a local cache of common CDN-delivered files.

https://decentraleyes.org/

I wondered if it supports fonts out of the box, but not currently.

https://github.com/Synzvato/decentraleyes/issues/105

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#233

Post by ncmncm »

rrdharan wrote: post #189
tyingq wrote: post #41

Earlier quoted context omitted.

It seems okay to me for the case of google. Since Google-owned sites, Adsense, Gmail, and Google Analytics are so ubiquitous, things like a font download are trivially easy for Google to correlate to your other activity. There's much less value for BunnyCDN to abuse it, because they don't have the critical mass of your other activity. Yes, just serving up your own fonts is better, but this is an improvement that seem…

I see this completely the opposite. There’s much more risk to Google to be lying about the privacy agreement applicable to Google Fonts ( https://developers.google.com/fonts/faq#what_does_using_the_... ) than there is to some unknown company that won’t be a target for regulators and won’t make any news for casually violating your privacy through shoddy engineering work or incompetence let alone maliciousness.

I perceive exactly zero risk to Google in lying about literally anything at all. Have you ever heard about them being even slightly inconvenienced in response to any abuse?

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#234

Post by ncmncm »

hsjdbdksjsj wrote: post #46
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

you won't believe this, but as the end user you can solve this in your life once and for all, and also improve your life! something rare for online annoyances nowadays. any decent browser, i mostly use firefox, have a checkbox in the font screen that prevents sites from changing the page font. i set all sites to user Ubuntu Mono. always. all the time. everywhere. the only downside are sites that use winding-like font…

Doesn't work on mobile anyplace I have tried. Setting is there, result nil.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#235

Post by ncmncm »

ByteJockey wrote: post #227
fritigern wrote: post #53

Earlier quoted context omitted.

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

> I don't think Americans and American companies understand how little trust rest of us have for the American government. Have you... have you seen our politics? What makes you think that we think other people trust our government? We don't trust our government. Hell, it's trusted so little that one of our large political parties is basically entirely devoted to making sure that the government can't get anything done…

... and, at the same time, to radically increasing government spending literally everywhere except where there might be a possibility of benefit for an individual who needs help (just because said individual could possibly be ("a") black).

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#236

Post by kube-system »

fritigern wrote: post #226
kube-system wrote: post #185

Earlier quoted context omitted.

90%+ of governments are more hostile to privacy than the US. It might make sense to prefer countries with GDPR, but the vast majority of "non-American countries" have even worse protections for your data. > and is a warmonger. This is flamebait unrelated to data privacy risk. If you don't want to use American companies because you have an political opposition to supporting US companies, that's also a valid opinion. Y…

> This is flamebait unrelated to data privacy risk. It's not flamebait, it's a legitimate reason. A country who has been killing people in various wars/invasions is unlikely to behave ethically when it comes to privacy. If you behave unethically in one area, I have every reason to assume that you'll also behave unethically in another area.

The number of governments that have not had to deal with ethics concerns is exactly zero.

Rather than drawing a broad hand-wavy link between ethics concerns and respect for privacy, you'd be much more accurate in measuring privacy by directly considering their practical legal frameworks that protect privacy.

> A country who has been killing people in various wars/invasions is unlikely to behave ethically when it comes to privacy.

This doesn't hold up. There are many countries that will straight up man-in-the-middle internet traffic with no oversight that have been at peace longer than Germany.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#237

Post by fritigern »

jokethrowaway wrote: post #186
fritigern wrote: post #53

Earlier quoted context omitted.

> we're in a country with better privacy laws Speaking as a European: I think this is a very important topic for us. I don't think Americans and American companies understand how little trust rest of us have for the American government. Working with a company that is not subject to the whims of the American government is a huge privacy win. If a company pitches me a product, they start 1 points ahead if they are base…

Any government sending any request to any company is very likely to get a compliant answer if they want to operate in that market. You can only trust services like signal which make it impossible for the operators to access your data GDPR is mainly against corporations making money out of knowing who you are across the web, it won't save you from a government actor

Signal Foundation is based in the US. It takes only 1 national security letter to compromise them.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#238

Post by usrn »

vehemenz wrote: post #35
usrn wrote: post #19

Earlier quoted context omitted.

Or even better just don't use custom fonts because they break a lot of things anyway.

Can you give some examples? Custom web fonts have been well supported since the late aughts.

They're a big reason pages load slowly and cause text to jump around when they do. Custom web fonts are awful.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#239

Post by KennyBlanken »

hsjdbdksjsj wrote: post #46
hannob wrote: post #31

I find it really strange where some privacy debates have gone wrong, and this is a perfect example. It's basically a form of "don't trust them, better trust us, also we're in a country with better privacy laws". Which is an imperfect solution at best, and given that I have no idea who bunny.net is it's a questionable one at best. If you embed a font hosted somewhere else you expose some of your user data to them. Now…

you won't believe this, but as the end user you can solve this in your life once and for all, and also improve your life! something rare for online annoyances nowadays. any decent browser, i mostly use firefox, have a checkbox in the font screen that prevents sites from changing the page font. i set all sites to user Ubuntu Mono. always. all the time. everywhere. the only downside are sites that use winding-like font…

You can also use the DecentralEyes plugin, which caches javascript and font resources from the common third party providers.

Re: Bunny fonts – privacy respecting drop-in replacement for Google Fonts

#240

Post by fritigern »

kube-system wrote: post #236
fritigern wrote: post #226

Earlier quoted context omitted.

> This is flamebait unrelated to data privacy risk. It's not flamebait, it's a legitimate reason. A country who has been killing people in various wars/invasions is unlikely to behave ethically when it comes to privacy. If you behave unethically in one area, I have every reason to assume that you'll also behave unethically in another area.

The number of governments that have not had to deal with ethics concerns is exactly zero. Rather than drawing a broad hand-wavy link between ethics concerns and respect for privacy, you'd be much more accurate in measuring privacy by directly considering their practical legal frameworks that protect privacy. > A country who has been killing people in various wars/invasions is unlikely to behave ethically when it come…

> The number of governments that have not had to deal with ethics concerns is exactly zero.

Some are worse than others. America is one of the worst. War, invasions, mass surveillance, mass incarcaration...

Post reply on HN