News for hackers. Stuff that matters.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @03:14PM (#18041951)
> "The Dragonfly memo reveals that a prototype of the censored search engine was being developed as an app for both Android and iOS devices, and would force users to sign in so they could use the service. The memo confirms, as The Intercept first reported last week, that users’ searches would be associated with their personal phone number. The memo adds that Chinese users’ movements would also be stored, along with the IP address of their device and links they clicked on."

This seems to be the direction for all users of Google. The new version of Chrome signs you into the browser even if you don't want to sign into the software itself. You can't really use Google's browsing device (Google Chrome) without providing your identity, if you ever want to sign into a Google website.

Support for Firefox is more important than ever.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by krn on Friday September 21, 2018 @04:35PM (#18042480)
I installed Chromium on Ubuntu today, and on the first run was given an opportunity to opt out from Google's personalized ads being shown to me based on my entire web browsing history. It was that moment when I realized, that what I had just installed was not primarily a web browser, but a Google application with a web browsing feature built-in. Because everything in it was built to optimize Google's ad revenue. It even had an ad blocker enabled by default, which made Google's ads stand out by disabling the ads by others.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by apostacy on Friday September 21, 2018 @05:22PM (#18042759)
I am so saddened by how much we trust Google. I wish we regarded Google software with more suspicion. Would people have been nearly as upset if it had been Google that acquired GitHub?

I miss the days of being suspicious of Microsoft. But Microsoft isn't nearly as diabolical as Google, nor are they as competent.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by blacksmith_tb on Friday September 21, 2018 @05:38PM (#18042843)
I'd argue MS has become less diabolical as they've become more competent (VS Code, e.g.). Google is more complex, they are certainly looking more diabolical, not quite sure about the more competent - I suppose it only matters that they are competent enough to be dangerous.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by deegles on Friday September 21, 2018 @07:16PM (#18043382)
That's because Microsoft's incentives are more aligned with ours. Better, more user-centric software == better outcomes for users, more Microsoft usage/profits.

Google, on the other hand, is fundamentally incentivized to sell ads, which requires collecting data. The more data they collect, the more money they make. As the saying goes, we are the product. No amount of hand-wringing or shaming is going to change that fundamental fact.

I think that in 100 years we're going to look back on how personal data is used the way we look at barbaric medical practices of the Dark Ages. People in general just didn't know or expect better.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by AnthonyMouse on Friday September 21, 2018 @11:57PM (#18044369)
> That's because Microsoft's incentives are more aligned with ours. Better, more user-centric software == better outcomes for users, more Microsoft usage/profits.

Microsoft is in the same business as Google. Search, Bing. Gmail, Outlook.com. GCP, Azure. They even operate an ad network.

Google has some bad incentives but Microsoft has all the same ones. If not, why isn't there a single button for "never send any of my personal information to Microsoft" anywhere in Windows 10?

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by krn on Saturday September 22, 2018 @04:35AM (#18045112)
> Microsoft is in the same business as Google.

Microsoft and Google may have competing products, but they are in completely different businesses. Microsoft is in the business of software, Google is in the business of data. That's why there's a public Bing Search API[1], but there's no public Google Search API.

[1] https://azure.microsoft.com/en-us/services/cognitive-service...

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by AnthonyMouse on Saturday September 22, 2018 @11:44AM (#18046432)
> Microsoft and Google may have competing products, but they are in completely different businesses. Microsoft is in the business of software, Google is in the business of data.

In what way are Windows and Edge "software" but Android and Chrome are not?

> That's why there's a public Bing Search API[1], but there's no public Google Search API.

The company that is operating a data service is the one not in the data business?

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by krn on Saturday September 22, 2018 @12:39PM (#18046682)
> In what way are Windows and Edge "software" but Android and Chrome are not?

> The company that is operating a data service is the one not in the data business?

A company in the software business charges for the usage of its software (Windows, Bing API). A company in the data business gives the software for free, and monetizes the data it collects about its users (Android, Google).

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by AnthonyMouse on Saturday September 22, 2018 @11:35PM (#18049250)
> A company in the software business charges for the usage of its software (Windows, Bing API). A company in the data business gives the software for free, and monetizes the data it collects about its users (Android, Google).

A services API isn't software. You're not buying a copy of the code and running it on your computer. And Google offers the same category of thing (paid services), e.g. the Google Maps API or G Suite, while Microsoft offers free services equivalent to google.com and gmail.com like bing.com and outlook.com.

Meanwhile Microsoft has been giving away actual software like Windows 10 for free, along with a variety of other things like IE/Edge (including for non-Windows platforms), VS Express, the Skype software, etc.

They're direct competitors operating in largely the same markets and using the same business models.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by krn on Sunday September 23, 2018 @04:28AM (#18050070)
> A services API isn't software. You're not buying a copy of the code and running it on your computer.

It's called SaaS, which stands for "Software as a service"[1].

> They're direct competitors operating in largely the same markets and using the same business models.

Google generates 84% of its revenues from ads[2], Microsoft generates 95% of its revenues from software[3].

[1] https://en.wikipedia.org/wiki/Software_as_a_service

[2] https://martechtoday.com/google-posts-31-1b-in-total-revenue...

[3] https://www.microsoft.com/en-us/Investor/earnings/FY-2018-Q1...

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by AnthonyMouse on Tuesday September 25, 2018 @11:55PM (#18072659)
> It's called SaaS, which stands for "Software as a service"

In other words, you're not buying a copy of the code and running it on your computer. So the provider has all your private information.

And if that's "software" then how is Google not a "software" company? All their services are that.

> Google generates 84% of its revenues from ads[2], Microsoft generates 95% of its revenues from software[3].

It's understandable that you missed this, but the distinction you're making is arbitrary. Microsoft can book ad revenue under software and service categories because the software/service is what generated the ad views. They definitely make more than 5% of their revenue from ads.

Percentages are also useless in general. If Google merged with Amazon (which has much higher revenue) then most of their revenue wouldn't be from "advertising" but how would that change their incentives at all? If anything it would be worse -- now they're providing more non-advertising services to you and have the incentive to spy on you via those services to increase their ad profitability.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by bobdole123456 on Saturday September 22, 2018 @03:53PM (#18047684)
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by krn on Saturday September 22, 2018 @04:26PM (#18047801)
It's Google's Custom Search API, designed to increase the usage of Google, not to replace it. Bing Search API allows creating new search engines that don't send user data back to Microsoft. That's why DuckDuckGo is powered by Bing, not Google.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by bobdole123456 on Sunday September 23, 2018 @06:58AM (#18050472)
Except that the entire reason most sites are searchable is because of the analytics includes on every single page, everywhere.

So, literally every click you make is trickling data back to Facegoogsoft, because that’s how indexing works.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by Alterlife on Saturday September 22, 2018 @01:22AM (#18044608)
In the meantime, Apple builds walled-garden devices with limited functionality so that users are forced to buy several devices.

It's unfortunate that every large vendor today has short-term incentives to screw users.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by fartcannon on Friday September 21, 2018 @06:38PM (#18043201)
I'd argue that Microsoft is much worse, what with their utter ubiquity in corporate environments, linkedin, github and win home users. Google ruined cell phones and Microsoft ruined personal computing.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by mcny on Friday September 21, 2018 @06:59PM (#18043312)
The problem is it is often difficult to decide where incompetence ends and where malicious begins. Microsoft Edge or at least EdgeHTML has a stated goal of being 100% compatible with Google Chrome. As you might guess, it isn't even close. Why? There are far too many competent people at Microsoft to say "never attribute to malice what can be described by incompetence". This isn't the kind of incompetence at Equifax.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by kerng on Saturday September 22, 2018 @10:24AM (#18046073)
Its sad that one has to be 100% compatible with Chrome. Is this something that someone at Microsoft really said? one should have to be compatible with the standards. If that statement is true, then it supports the claim of Google's dominance- which is unhealthy for the browser market, and users.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by mcny on Saturday September 22, 2018 @11:53AM (#18046463)
Maybe I didn't capture the wording perfectly. Maybe I reported what I heard and not what they said?

> any Edge-WebKit differences are bugs that we’re interested in fixing

context:

> We recommend that web developers avoid UA sniffing as much as possible; modern web platform features are nearly all detectable in easy ways. Over the past year, we’ve seen some UA-sniffing sites that have been updated to detect Microsoft Edge… only to provide it with a legacy IE11 code path. This is not the best approach, as Microsoft Edge matches ‘WebKit’ behaviors, not IE11 behaviors (any Edge-WebKit differences are bugs that we’re interested in fixing). In our experience Microsoft Edge runs best on the ‘WebKit’ code paths in these sites. Also, with the internet becoming available on a wider variety of devices, please assume unknown browsers are good – please don’t limit your site to working only on a small set of current known browsers. If you do this, your site will almost certainly break in the future.

Personally, I think operations infrastructure should take a a more hands-off approach and let people use whatever web browsers they want and focus on educating users on why and how rather than on what. However, it is not practical for a variety of reasons. I had a chance to chat with a Chrome team member. He assured me that if you are an IT department and want to deploy Chrome in your enterprise, the Chrome team is committed to stand behind you. You can start at https://enterprise.google.com/chrome/chrome-browser/ If you have custom home-grown applications that require a legacy browser, you can centrally manage lists. In practice, this means that users will just need to open Google Chrome. If they go to some address that requires a legacy browser, Chrome will automatically kick you to the legacy browser. When someone continues on the legacy browser, you can kick them back to Google Chrome and have them continue there. I think this is the better path forward especially considering that Windows 7 will end of life in 2020. While I love Mozilla Firefox, I think Chrome is your only choice when it comes to Enterprise desktop.

For web developers like me, Edge has such a small market share that it makes no sense to test for Edge. From what I understand above, I shouldn't have to test for Microsoft Edge. It shouldn't have any of the legacy stuff from MSIE. That being said, threats of mono culture aside, I think it is best for any corporation to move their web browser to Google Chrome. Your people will be more productive on Google Chrome because it is the browser they know and love.

https://blogs.windows.com/msedgedev/2015/06/17/building-a-mo...

If you're reading this, hello from Google Cloud Summit New York!

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by matheusmoreira on Friday September 21, 2018 @06:19PM (#18043092)
What if we use ungoogled-chromium instead? How effective is it at removing Google from the browser?
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by 0xb100db1ade on Saturday September 22, 2018 @07:30PM (#18048547)
Take a look at ungoogled chromium

https://github.com/Eloston/ungoogled-chromium

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by oh_sigh on Friday September 21, 2018 @11:28PM (#18044297)
A more appropriate direction would be "trust Google as much as you trust the government of the area you're in"

Google has clearly showed that they will kowtow to whatever the local law is. As far as I can tell they do this as a last option though, and not just because they don't believe in certain ideas of privacy.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by jbigelow76 on Friday September 21, 2018 @03:20PM (#18041988)
You can't really use Google's browsing device (Google Chrome) without providing your identity, if you ever want to sign into a Google website.

That makes total sense. Google is in the business of selling ads, this requires getting as much information as possible on users, through any means possible, software downloads, online services, it's all the same in the end.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by prepend on Friday September 21, 2018 @04:19PM (#18042381)
Google makes money off ads through Firefox, ie, and safari. Requiring absolute browsing data on all users goes above and beyond just meeting their bottom line.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @04:22PM (#18042396)
I'm not sure if you are defending their abuse of users or just stating the reasons why they do it.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by jbigelow76 on Friday September 21, 2018 @04:54PM (#18042596)
The reasons as to why they do it defend the reasons as to how they do it, the end justifies the means.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @07:21PM (#18043402)
I'm not sure what you're saying. If you are walking down a quiet street at night, and a person with bad intentions needs some money, then it "makes sense" for them to beat you up and take your wallet and phone. They needed some money, so the mugger's behavior is not unexpected, and their end justified their means. That doesn't say anything about whether it's right or not, or whether people should do something to prevent muggings or not.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by mercer on Friday September 21, 2018 @05:01PM (#18042623)
That doesn't answer JoshMnem's question. Justifies the means to whom? If the answer is google, I'm not sure what the point of your comment was, as that's pretty obvious...
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by jbigelow76 on Friday September 21, 2018 @05:07PM (#18042654)
Yes, my answer was google, I found the question to be as obvious as you found my answer to be.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by mercer on Friday September 21, 2018 @05:13PM (#18042699)
Well, this is all rather pointless then!
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by tapoxi on Friday September 21, 2018 @03:16PM (#18041967)
Or you could just use Chromium.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by binomialxenon on Friday September 21, 2018 @04:38PM (#18042487)
I'd rather non-Chrome browsers such as Firefox and Safari keep some market share so we don't end up with too many "Only works in Chrome" webistes.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @03:22PM (#18042014)
Chromium has many of the same problems as Chrome. I don't think Google can be trusted to not abuse their position any more.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by noir_lord on Friday September 21, 2018 @03:39PM (#18042114)
I wonder how far they can push it before one of the larger more open distro's just goes "yep, that was far as you are going" and we end up with the Chromed Ice Weasel.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by _red on Friday September 21, 2018 @04:05PM (#18042267)
Well there is already vivaldi, iridium, and ungoogled-chromium. But a better choice, IMO, is to install Brave since they are not just removing spy-features, but enabling new ideas to incentivize support for a more privacy focused internet.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @04:25PM (#18042409)
The ad model is fundamentally broken, because all roads there eventually lead to tracking and online garbage. Monocultures are bad, so I don't think people should only use Chrome-based browsers. Google once tried to do ads without going down the wrong path, but that clearly hasn't worked out.

I think that Firefox Quantum is a better alternative.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by yuhong on Friday September 21, 2018 @04:57PM (#18042607)
Yea, that was what my essay/overview was about, including tracing these problems back to Larry/Sergey. It is probably worth posting a link here: http://yuhongbao.blogspot.com/2018/09/google-doubleclick-moz...
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by matheusmoreira on Friday September 21, 2018 @06:29PM (#18043147)
How effective is ungoogled-chromium at removing Google from the browser?
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by 18pfsmt on Friday September 21, 2018 @06:32PM (#18043167)
Have you looked at this project?

https://github.com/Eloston/ungoogled-chromium

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by sincerely on Friday September 21, 2018 @08:40PM (#18043793)
That has the same issue as Waterfox and other projects where you lose out on quick fixes for discovered exploits.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @06:58PM (#18043301)
I've seen it, but Chromium is fundamentally a Google product and it still has some of Chrome's problems. If we want future generations to experience technology freedom, we should avoid monocultures.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by pymai on Saturday September 22, 2018 @02:21AM (#18044778)
there are other chromium based browsers like vivaldi and brave that might disable a lot of the google crap but i couldn't be certain of the top of my head
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by snr on Friday September 21, 2018 @06:45PM (#18043238)
>"The new version of Chrome signs you into the browser even if you don't want to sign into the software itself"

Damn. I just realized that. Signing out of browser signs you out of GMail. And signing into GMail signs you into the browser. Went to download Edge but turns out it's not on Win Server. MSFT really needs to get its act together.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by zachberger on Friday September 21, 2018 @07:12PM (#18043367)
Out of curiosity why are you using a web browser on a server?
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by pmontra on Saturday September 22, 2018 @01:42AM (#18044667)
I used one yesterday on Windows Server 2016 Datacenter because the new version of the only application running there needed .NET 4.7.2. It started IE which after a long sequence of allowing web sites (tracking and not, included Google Analytics) eventually managed to download the installer. IE was already on the server. I really wanted to install Firefox to avoid all that absurdity of whitelisting sites.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by snr on Sunday September 23, 2018 @05:18PM (#18053281)
Employer's choice of workstation OS :/
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by koolba on Friday September 21, 2018 @07:21PM (#18043398)
Why not Firefox?
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by snr on Sunday September 23, 2018 @05:19PM (#18053293)
Yep that's what I ended up eventually downloading. Edge on Win 10 is not bad actually.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by AndrewKemendo on Saturday September 22, 2018 @01:54PM (#18047051)
Support for Firefox is more important than ever.

Agreed.

I had always been a FF user, but switched to chrome about a year ago because it was faster. The latest version of Chrome pushed me back to Firefox, as it's WAY slower and not particularly friendly to tracking, even with Ghostery/uBlock etc... installed

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by zaarn on Saturday September 22, 2018 @03:56AM (#18045012)
The only remaining google usage I have is the Android play store, though I should flash a custom rom so I can use yalp store more effectively.

I'm done with Google and refuse to support their products and services.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by Markoff on Saturday September 22, 2018 @10:43AM (#18046152)
TBH Yalp store it's very clunky and unreliable, you will find out when you get rid off gapps like i did, it would be probably easier to use apkmirror
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by magicalist on Friday September 21, 2018 @05:30PM (#18042802)
> The new version of Chrome signs you into the browser even if you don't want to sign into the software itself. You can't really use Google's browsing device (Google Chrome) without providing your identity, if you ever want to sign into a Google website.

It doesn't sounds like you've actually tried this.

It doesn't sign you into anything but the google website, just like before. You have to turn on browser sync to sign into the browser. Seriously, try it. Your passwords, history, etc aren't there, and nothing shows up in your history from that session. Signing out of gmail still signs you out.

The new system is annoying because it makes it more difficult (impossible?) to sync to one Google account while having another one be the primary signed in one, but it doesn't sign the browser into anything on its own.

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @05:35PM (#18042830)
I've tried it multiple times and logging into a Google website automatically logs you into the browser itself (not just the website). Trying to clear cookies now doesn't clear Google's cookies either. Chrome 69.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by DenisM on Friday September 21, 2018 @05:40PM (#18042853)
Not for me it doesn't. 69 on Mac OS.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by JoshMnem on Friday September 21, 2018 @07:03PM (#18043330)
To reproduce:

- log out of Google Chrome

- clear all cookies (requires digging deep into the settings or using devtools, otherwise Google's cookies will remain)

- restart the browser

- make sure that your picture is not displayed in the browser itself or in the browser settings and that you aren't in incognito mode

- visit the Gmail website and log in

- your picture will now be displayed in the browser software itself (not just Google websites) and in the browser settings

- clearing cookies (ctrl-shift-del on Linux) will not log you out of Google websites or the browser

Re:Google Suppresses Memo Revealing Plans to Closely Track S... by quickben on Friday September 21, 2018 @06:37PM (#18043195)
Where are you two located? I have noticed Google discriminates per location. For example creating a Gmail account from Canada isn't possible without a phone number, whereas creating one from Europe is.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by codedokode on Friday September 21, 2018 @08:49PM (#18043828)
It probably depends on IP address reputation. For me in Russia, Google always requires a phone number, but I saw reports by others that phone isn't required for them.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by DenisM on Saturday September 22, 2018 @01:51PM (#18047030)
Seattle
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by codefined on Friday September 21, 2018 @05:48PM (#18042909)
It's not just JoshMnem who has this, the same happens to me. Running 69 on Windows.
Re:Google Suppresses Memo Revealing Plans to Closely Track S... by magicalist on Friday September 21, 2018 @05:57PM (#18042959)
> the same happens to me

In about:settings, does it say at the top "Syncing to codefined", or is there a button you can press to "Sync as codefined". Maybe the confusion is the UI.