Live data from Hacker News

Am I logged in or not? GDPR case study on the example of Chrome browser change

blog.lukaszolejnik.com

311–320 of 507 posts

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#311
post #272

Earlier quoted context omitted.

I mean I'm a "techie" and I think I understand. I still don't care..

Didn't say you had to...

Earlier comment said "Once people understand, they care."

Your comment basically implied "maybe they don't really understand which is why they don't care".

So I am refuting the original statement because I presumably do understand, and I still don't care.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#312
post #3

I don't understand why the Chrome team is picking this hill to die on- their team (managers and developers) are all over twitter and reddit trying to explain the privacy violations away as if the people upset about this are just not understanding what's going on. I really expect this change to push a lot of people away from Chrome, and frankly I wouldn't be surprised if it started opening up more antitrust possibilit…

I personally know people who think they are signing into Chrome when they sign into google.com. Maybe the Chrome team is right about their larger user base?

I don’t doubt that the Chrome team is right about the problem the majority of their users are facing. It’s just that those users are also unaware of the privacy implications, and supplanting a bad problem with a worse one ain’t a fix.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#313
post #308

I'm still not clear about what the actual change in behavior even is - seeing some statements on Twitter from someone on the dev team, it sounded to me like there isn't actually any difference, just a UI change to show which Gmail account is currently logged into. If that's really all it is, I don't really get what people are upset about. Specifically, if there's no additional data being stored connected to your acco…

Now if you log into a Google account, Chrome is logged into that same account as well. Also if you clear all cookies, cookies from Google aren't cleared. Some people (myself included) don't like that.

But this is only if you already have Chrome Sync ("logging in to Chrome") turned on and enabled, correct? Because I have a bunch of different Chrome profiles that I use for different purposes, and I don't see the ones that I use for particular Gmail accounts getting logged in to Chrome.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#314
post #313
post #308

Earlier quoted context omitted.

Now if you log into a Google account, Chrome is logged into that same account as well. Also if you clear all cookies, cookies from Google aren't cleared. Some people (myself included) don't like that.

But this is only if you already have Chrome Sync ("logging in to Chrome") turned on and enabled, correct? Because I have a bunch of different Chrome profiles that I use for different purposes, and I don't see the ones that I use for particular Gmail accounts getting logged in to Chrome.

(not a chrome user, but:) my understanding is that now if you log into google (e.g. a gmail account), you automatically get logged into chrome, including Chrome Sync.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#315
post #313

Earlier quoted context omitted.

But this is only if you already have Chrome Sync ("logging in to Chrome") turned on and enabled, correct? Because I have a bunch of different Chrome profiles that I use for different purposes, and I don't see the ones that I use for particular Gmail accounts getting logged in to Chrome.

(not a chrome user, but:) my understanding is that now if you log into google (e.g. a gmail account), you automatically get logged into chrome, including Chrome Sync.

Yes, you automatically get logged into chrome. Supposedly sync will not automatically be enabled, but if you ever enabled it in the past it will be turned back on for your chrome session as well. It's unclear what happens to old (pre-login) history and cookies when this happens.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#316

Earlier quoted context omitted.

They may understand it on a superficial level, but do they understand it on a practical one? Everyone "understands" that Facebook collects user data. It's the contextual understanding that makes techies uneasy.

What you're saying is a pretty condescending way to treat other people's opinions. You're essentially questioning whether or not they really understand (complete with scare quotes) if they don't share your opinion. It's not the "contextual understanding" - or any kind of understanding - that makes some techies uneasy. It's their own opinions and personal comfortability with regard to data monetization. Many people un…

And yet, given a parallel into what is happening as if it were a different company ‘e.g. would you be fine with our man standing outside your house and observing your every movement as a condition of service’, most of these people that ‘understand’ switch to WTF?! No! If you then ask them to stop using Chrome or Facebook it’s suddenly ‘different’.

The only thing that’s different is that they can remain blissfully unaware of it.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#317
post #281
post #93

Earlier quoted context omitted.

They could support both use cases by popping up a dialog on sign-in to a Google web property: "You're signing into Gmail. Would you like to link Chrome to joebloggs@gmail.com? This will enable automatic notifications in Gmail, sync passwords and web history, and also automatically log into other Google websites when you visit them". "Yes / No / No, and don't ask again"

Yeah, except: > This will enable automatic notifications in Gmail > sync passwords and web history Chrome 69 does not enable either of these things just by signing into Gmail. (Sync being a separate opt-in has been well discussed. I just tested notifications on a new profile: they're not automatically enabled, and if I try to enable them in Gmail settings, I still get the usual browser permissions dialog.) > and also…

I’m still not clear about how exactly this new feature is decoupled from sync. Where is the source of truth for the sync setting — is it in cloud or locally in every browser profile?

If I have chrome sync enabled in browser on desktop a, then login to gmail in chrome on desktop b — is the browser history on desktop b now synced ...?

Also curious whether sync implies that old browser history in desktop b is synced to my account or is it guaranteed to be the case that “only browser data collected while logged in” is eligible for being synced between devices ...?

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#318
post #295
post #3

I don't understand why the Chrome team is picking this hill to die on- their team (managers and developers) are all over twitter and reddit trying to explain the privacy violations away as if the people upset about this are just not understanding what's going on. I really expect this change to push a lot of people away from Chrome, and frankly I wouldn't be surprised if it started opening up more antitrust possibilit…

I work at Google; opinions are my own. > I don't understand why the Chrome team is picking this hill to die on- their team (managers and developers) are all over twitter and reddit trying to explain the privacy violations away as if the people upset about this are just not understanding what's going on. My impression is that this is the new norm at Google. It happens with everything, internal or external. The sad rea…

'0.1% of a billion is still a considerable amount' is a very important observation, and one my colleagues at Google (before I left) rarely seemed to grasp. People think they can get away with a lot of cutting corners or lack of rigor in their engineering and design when mistakes can impact millions of people... our industry really isn't prepared for deploying products at this scale.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#319
post #313

Earlier quoted context omitted.

But this is only if you already have Chrome Sync ("logging in to Chrome") turned on and enabled, correct? Because I have a bunch of different Chrome profiles that I use for different purposes, and I don't see the ones that I use for particular Gmail accounts getting logged in to Chrome.

(not a chrome user, but:) my understanding is that now if you log into google (e.g. a gmail account), you automatically get logged into chrome, including Chrome Sync.

That is not at all my understanding. If you don't have sync enabled, nothing automatically enables sync. You have to go through a large confirmation dialog (with an "undo" button) to enable sync.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#320
post #313

Earlier quoted context omitted.

But this is only if you already have Chrome Sync ("logging in to Chrome") turned on and enabled, correct? Because I have a bunch of different Chrome profiles that I use for different purposes, and I don't see the ones that I use for particular Gmail accounts getting logged in to Chrome.

(not a chrome user, but:) my understanding is that now if you log into google (e.g. a gmail account), you automatically get logged into chrome, including Chrome Sync.

Yeah my account was signed in and syncing when, prior to the update, I explicitly turned off sync so that was alarming to me. I immediately turned off syncing and now I can't trust Google to obey my settings anymore. They randomly turn on syncing when I use Google voice assistant on my Android phone.
Post reply on HN