Live data from Hacker News

Am I logged in or not? GDPR case study on the example of Chrome browser change

blog.lukaszolejnik.com

441–450 of 507 posts

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#441

Earlier quoted context omitted.

I can see why they thought this was a good change. It's a good change only if you are permanently logged in to google services, which is probably why it seemed like a great idea to the Chrome team, who probably have no idea how much distrust Google has started to build up. It moves the browser closer to an app runner for google services - I'd understand that if this was on Chrome OS or a specific 'Google' app, but in…

Just use different browsers for different things man, this isn't even hard. I seriously do not understand the outrage over this. Half the websites we visit host their fonts on Google domains, where is the outrage over that?

> Half the websites we visit host their fonts on Google domains, where is the outrage over that?

Copy that. Thats a serious privacy leak, Referrers, none of the adblockers handle today.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#442

Earlier quoted context omitted.

@__apf__ is being slightly disingenuous when she says "Not much ... like a Gmail login state indicator." Google logins are used across the web by a lot of sites. For instance here's what happens when you visit an Indian financial paper, the Economic Times, using Chrome 69: https://imgur.com/a/nFvxI0U (some personal info has been blurred out). I almost never visit the Economic Times, and I certainly never log in, but…

It all makes sense if the end goal is for the browser to push google login across the web, and make google accounts the preferred way to log in to websites. In that case they're doing you a favour, it's all in your best interests, as well as Google's of course. [/sarcasm] I simply don't trust a single corporation that much.

They are not doing me a favor. Software companies need to stop believing their own paternalistic propaganda. Nobody at Google is in a position to determine whether they are doing me a favor or not.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#443
post #434

Earlier quoted context omitted.

When you have a checkbox for every possible customisation option, you end up with a commercial airliner cockpit - hundreds of flashing lights and switches, that you need a comprehensive manual and years of experience to properly operate.

I wonder if we’re not already at this point though, and it might not be a bad thing. Not everyone uses a browser the same, but a decent part of people here will spend their working life in the browser. I think for people here it won’t be rare to have dozen of windows with each dozen of tabs, some logged in different acconts within the site they show, some in incognito, some with in developer mode. Even with just the…

The problem is that you're in the 0.001% of people who want their software complicated like an airline cockpit.

Most people don't give a shit, they just want to check their gmail and couldn't care less. They don't even read the alert boxes that do pop up. They just click almost anything blindly.

As a result, companies get away with dark patterns and privacy-compromising changes like this.

I'm somewhere in the middle. I don't want airline-cockpit controls, but I do want the ability to not sync to the cloud/NSA if I want.

I also don't want to be tricked into syncing by some dark pattern silent update that makes an ambiguous clickbox that doesn't clearly say what the privacy implications are either.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#444
My workaround for now, which I hope continues to work past Chrome 69, is to use Incognito-Filter to force all google.com accesses to open in Incognito Mode.

https://chrome.google.com/webstore/detail/incognito-filter/c...

This way I can log into Gmail and it won't log me into Chrome.

Obviously not ideal, and it doesn't excuse the deceptive and user-hostile malware Google just foisted on us, but it's a workaround.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#445

Earlier quoted context omitted.

Just use different browsers for different things man, this isn't even hard. I seriously do not understand the outrage over this. Half the websites we visit host their fonts on Google domains, where is the outrage over that?

> Half the websites we visit host their fonts on Google domains, where is the outrage over that? Copy that. Thats a serious privacy leak, Referrers, none of the adblockers handle today.

ublock Origin blocks third-party content, including silly fonts hosted by Google, just fine for me.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#446

Earlier quoted context omitted.

Just use different browsers for different things man, this isn't even hard. I seriously do not understand the outrage over this. Half the websites we visit host their fonts on Google domains, where is the outrage over that?

> Half the websites we visit host their fonts on Google domains, where is the outrage over that? Copy that. Thats a serious privacy leak, Referrers, none of the adblockers handle today.

uBlock blocks remote fonts. Between sites hosting their own assets becoming old fashioned and font's being used for icons it breaks a lot of things.

I'm hoping CDN's get the same privacy treatment as facebook and the like have been getting lately and we can go back to a self hosted world.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#447

Earlier quoted context omitted.

Yeah...and that thread says that the change is basically nothing, just a UI indicator: > Q: I don’t get, though — if you’re signed in to the browser but sync is off, then what does it mean to be signed in to the browser? What does it do besides sync? > A: Not much, you can think of it like a Gmail login state indicator. If that's fully the case, then there's nothing to see here and people are freaking out over nothin…

It's almost a certainty that they will continue down the slippery slope and start syncing data automatically in a future update. That sort of change has happened several times, so there is precedent.

But can't you protect your synced data with a passphrase?

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#448
IANAL, but I think the gdpr/antitrust case lies in the other direction,E.g not in [login on google/youtube]->[logged in in chrome] but in [logged in in chrome] ->[Can't use youtube/google anonymously].

If we take all of googles privacy controls and privacy policies for the truth, they now have an additional way to track me and I can't disable this without completely missing out on any other google service. This propably also circumvents any installed cookie blockers (but only for google) which could be interpreted as not honoring the denial of tracking.

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#449

Earlier quoted context omitted.

It all makes sense if the end goal is for the browser to push google login across the web, and make google accounts the preferred way to log in to websites. In that case they're doing you a favour, it's all in your best interests, as well as Google's of course. [/sarcasm] I simply don't trust a single corporation that much.

They are not doing me a favor. Software companies need to stop believing their own paternalistic propaganda. Nobody at Google is in a position to determine whether they are doing me a favor or not.

It was sarcasm, this is how the google workers rationalise this to themselves (see other posts on this thread).

Re: Am I logged in or not? GDPR case study on the example of Chrome browser change

#450

Earlier quoted context omitted.

Then again, maybe we shouldn't be throwing around words like "evil", which we all know is hyperbole (even if invited hyperbole because of Google's own prior statements). Someone talks about Google being evil, and then other people push back because it's not really "evil", and they are both right, so neither ever gives an inch. Sure, there's less impact when statements are less hyperbolic, but there's also less bikesh…

Evil sort of loses it’s meaning when it’s thrown a google in a world where Pennsylvania just banned books that aren’t sold through their systems from prisons, where ICE kills children in concentration camps, and that’s talking domestic issues only. I mean, if google is evil then what do you call North Korea? Super duper evil?

I was just referring to Google's own phrase: "Don't be evil."

Google is evil in the same way now, that Microsoft was back in the day.

Post reply on HN