News for hackers. Stuff that matters.
Re:Google Home Beats Amazon Echo in Q1 2018 Smart Speaker Sh... by blackflame7000 on Thursday May 24, 2018 @06:23AM (#17142639)
I mean they can only track what I choose to share with them. They don't have some magic wand that breaks HTTPS.
Re:Google Home Beats Amazon Echo in Q1 2018 Smart Speaker Sh... by 908087 on Thursday May 24, 2018 @12:12PM (#17145409)
Actually, they do. It's called Google Analytics, and it exists on a very large portion of the web.

TLS isn't going to help protect you when the site you're on is loaded with user tracking and analytics scripts anyway.

Re:Google Home Beats Amazon Echo in Q1 2018 Smart Speaker Sh... by ocdtrekkie on Thursday May 24, 2018 @12:39PM (#17145751)
This is why Google's pushing HTTPS Everywhere so hard, just like net neutrality: It eliminates Google's competition in collecting and monetizing data about your viewing.

Google will claim that they make these moves because they care about your privacy, security, and freedom, but malicious tracking scripts they don't do anything about, because that would close off their own profit scheme.

Re:Google Home Beats Amazon Echo in Q1 2018 Smart Speaker Sh... by icebraining on Thursday May 24, 2018 @01:25PM (#17146242)
Which competitors will be excluded by the increase in HTTPS? Which companies exactly are relying on the connections being unencrypted, and how are they able to monitor them?

And if Google's competitors are spying on HTTP rather than using tracking scripts, why does seemingly every page I visit load tracking scripts from a bunch of companies?

Re:Google Home Beats Amazon Echo in Q1 2018 Smart Speaker Sh... by ocdtrekkie on Thursday May 24, 2018 @01:39PM (#17146354)
ISPs. HTTPS Everywhere and net neutrality laws are both endeavors designed to mitigate ISPs from providing ad networks and/or collecting data on Internet usage.

Of course, Google claims they do this for your benefit, but if it was for your benefit, they'd need to stop doing the same things with tracking scripts. This is how you can tell they are pushing these to reduce competition, not to increase your privacy.

Re:Google Home Beats Amazon Echo in Q1 2018 Smart Speaker Sh... by icebraining on Thursday May 24, 2018 @01:58PM (#17146544)
I can't say I've ever seen Google claim HTTPS was intended to protect my privacy, but fair enough, I forgot that ISPs can do that in the US.
Re:Google Home Beats Amazon Echo in Q1 2018 Smart Speaker Sh... by niftich on Thursday May 24, 2018 @02:03PM (#17146606)
In one of the major announcements for Chrome, 'Moving towards a more secure web' (2016-09-08) [1], the Chrome Security Team writes:

"Chrome currently indicates HTTP connections with a neutral indicator. This doesn't reflect the true lack of security for HTTP connections. When you load a website over HTTP, someone else on the network can look at or modify the site before it gets to you."

The word 'modify' is a hyperlink to an article titled 'AT&T Hotspots: Now with Advertising Injection' [2] (ironically, a non-HTTPS site).

[1] https://security.googleblog.com/2016/09/moving-towards-more-... [2] http://webpolicy.org/2015/08/25/att-hotspots-now-with-advert...