391–400 of 642 posts
Is this at the "Chrome" level, or baked in at the "Chromuim" level? And therefore also an issue for Brave, Opera, Vivaldi, new-Edge, and anything else jumping on the browser engine monoculture?
I must be dense but I never see the `x-client-data` header in the request headers of the network tab in developer tools.
I must be dense but I never see the `x-client-data` header in the request headers of the network tab in developer tools.
Earlier quoted context omitted.
This is impressive doublespeak. > This ... header ... will not contain any personally identifiable information > a seed number which is randomly selected on first run ... chosen between 0 and 7999 (13 bits of entropy) They are not including any PII... while creating a new identifier for each installation. 13 bits of entropy probably isn't a unique identifier iff you only look at that header in isolation. Combined wit…
> > Experiments may be further limited by country (determined by your IP address) > They even admit to inspecting the IP address... I don't think that sentence admits what you say? Chrome could be determining which experiments to run client-side. Of course, when you visit a Google property, they needs must inspect your IP address to send a response to you, at a minimum. That goes for any site you might choose to visi…
If you don't know how all this works, which is true for most human beings, their privacy policy might give you the wrong impression.
Earlier quoted context omitted.
> They are not including any PII... while creating a new identifier for each installation. 13 bits of entropy probably isn't a unique identifier iff you only look at that header in isolation. Combined with at least 24 additional bits[1] of entropy from the IPv4 Source Address field Google receives >=37 bits of entropy, which is almost certainly a unique ID for the browser. Linking that browser ID to a personal accoun…
>Now this is interesting. If without that 13 bits of entropy, what will Google lost? Is it because of this 13 bits then Google suddenly able to track what they were not? At the very least, having those 13 bits of entropy along with a /24 subnet allows you to have device-level granularity, whereas a /24 subnet may be shared by hundreds of households.
https://cs.chromium.org/chromium/src/components/metrics/entr...
Look how the function is called, high-entropy source :)
I must be dense but I never see the `x-client-data` header in the request headers of the network tab in developer tools.
[0]: https://github.com/Eloston/ungoogled-chromium
[1]: https://github.com/bromite/bromite/blob/79.0.3945.139/build/...
[2]: https://github.com/bromite/bromite/issues/480#issuecomment-5...
Earlier quoted context omitted.
IP addresses are considered PII under both GDPR and CCPA.
... which is crazy unrealistic, since it's "PII" that can only stay "private" by collective agreement of every node in the network, but no accounting for the reality of network architecture in passing law, I guess. Maybe a deep expectation of anonymity while accessing a worldwide network of cooperative machines is something people should stop telling the public they should expect?
IMHO, that is very reasonable.
Real world example - giving your phone number and information to your car mechanic / doctor / bank teller / plumber is reasonable. Using that information to score girls or ask donation for a puppy shelter would be considered improper.
Earlier quoted context omitted.
I think you probably should have used 'associated with' instead of 'tied to' as when discussing remuneration contractual ties is not a minority usage of the idiom.
I'm not Kick, but while you're correct that "associated with" would've been better for clarity, no reasonable person would assume that "inversely tied" describes a contractually mandated drop in performance for an increase in pay (my other comment here links to dictionary.com and thesaurus.com, both good references for this discussion). Couple that with the generally accepted usage of 'tied' and the usage by Kick was…
ex. "John's salary is tied to performance - if the company is valued at over 100 billion, he'll get another 5% stock" etc.
or "bonuses are tied to performance milestones"
If you are simply observing that an executives pay rises while performance falls, associated is a clearer term.
According to this source code [0], it looks like this is in Chromium as well. Does that mean this affects Electron applications? [0]: https://chromium.googlesource.com/chromium/src/+/master/comp...