News for hackers. Stuff that matters.
Re:Am I logged in or not? GDPR case study on the example of ... by rando444 on Monday September 24, 2018 @02:52PM (#18060295)
It's bad because it's by default signing you into a service you didn't ask to be signed into, and don't have an easy option of turning this off.

Sure, it doesn't automatically sync your browsing history now, but we all know change happens gradually. It's just a "feature" to be enabled later.

I've never once signed into chrome in my life (on purpose). I don't want anything synced between browsers, I like to try and limit what gets kept in the cloud, and with this change they've simply just taken the option away from the user.

Yes, I'm sure that I'm in the minority, but I'm taking this opportunity to start switching to Firefox, switching my mail provider, and am hoping to send them a GDPR request to delete all of my data.

It's not necessarily just this issue that made me do it, it's just the tipping point for me that says.. "ok, this company has gotten too big off people's data, and i no longer wish to be a part of feeding that machine"

Just my 2 cents.

Re:Am I logged in or not? GDPR case study on the example of ... by Twirrim on Monday September 24, 2018 @04:14PM (#18061016)
>I've never once signed into chrome in my life (on purpose). I don't want anything synced between browsers, I like to try and limit what gets kept in the cloud, and with this change they've simply just taken the option away from the user.

At the jobs I've been in since browser syncing became a thing, where there were internal web tools, there has been an explicit policy against enabling it, out of security concerns. Regardless of how good the security might be at Google or Firefox etc. around their syncing stuff, if the content isn't there, it can't be compromised.

Re:Am I logged in or not? GDPR case study on the example of ... by feanaro on Monday September 24, 2018 @03:11PM (#18060489)
I'm not sure you're in the minority. People like to say that but sometimes that just seems like a currently popular rhetoric.
Re:Am I logged in or not? GDPR case study on the example of ... by sp332 on Monday September 24, 2018 @02:55PM (#18060316)
What is (or was) the difference between signing in to Gmail in the browser, vs signing in to the browser without sync?

(You might feel that this is a tipping point but it's still not a GDPR issue as far as I can tell.)

Re:Am I logged in or not? GDPR case study on the example of ... by hackinthebochs on Monday September 24, 2018 @03:35PM (#18060716)
The difference for me is that, previously I knew I was multiple difficult steps away from having my browsing data uploaded to Google servers. That provided me a level of comfort that doesn't exist anymore. With the new method I'm one misclick away from giving everything to Google. Add on to this, Chrome has been increasingly pushy with its sign in prompts. There's no reason to think it won't eventually be equally pushy with its sync prompts.
Re:Am I logged in or not? GDPR case study on the example of ... by tedivm on Monday September 24, 2018 @04:12PM (#18061001)
For one thing they have completely different privacy policies. By signing into the chrome they are automatically forcing people to accept the privacy policy that is far less private than the when people aren't signed in.
Re:Am I logged in or not? GDPR case study on the example of ... by _dmurph on Monday September 24, 2018 @04:39PM (#18061199)
This doesn't seem to be turning on Chrome Sync, so users aren't being forced into any privacy policy:

https://twitter.com/__apf__/status/1044109898013765632

Re:Am I logged in or not? GDPR case study on the example of ... by tedivm on Monday September 24, 2018 @04:46PM (#18061270)
Read the actual privacy policy, not the tweet talking about it. Primary sources are always best.

> The personal information that Chrome stores won't be sent to Google unless you choose to store that data in your Google Account by signing in to Chrome.

That doesn't say "unless you enable sync", it says it changes "by signing in to Chrome". Since they're now forcing you to sign into chrome without your consent they are also forcing you to accept that they can send your data to their services without needing any additional permissions from you.

Re:Am I logged in or not? GDPR case study on the example of ... by comex on Monday September 24, 2018 @06:53PM (#18062182)
Literally the next sentence after the one you quoted is:

> Signing in enables Chrome’s synchronization feature.

This is no longer true, so it seems most likely that that entire paragraph is simply out of date.

Re:Am I logged in or not? GDPR case study on the example of ... by sp332 on Monday September 24, 2018 @04:54PM (#18061363)
Thanks, this is the first comment on the issue that actually made sense to me.
Re:Am I logged in or not? GDPR case study on the example of ... by _dmurph on Monday September 24, 2018 @03:33PM (#18060698)
What is the service?