News for hackers. Stuff that matters.
Re:Google no longer providing original URL in AMP for image ... by DevKoala on Wednesday May 27, 2020 @03:21PM (#23328511)
The publishers are not mentioning to the visitor they are adding one more third party looking at your data; one that maintains an ad exchange and will be an intermediary on every resource request.

A publisher is free to switch to AMP, but choice needs to be given to the user to agree or leave the site the same way it happens with cookies. I wouldn’t opt in and now I cannot block Google tracking at the DNS level thanks to this.

Re:Google no longer providing original URL in AMP for image ... by Kalium on Wednesday May 27, 2020 @04:34PM (#23329598)
Publishers can, and should, always make visitors aware of how many third parties are positioned to see all visitor data.

We are, unfortunately, a long way from this being normal. Even as third parties doing things like running CDNs or doing TLS termination for other reasons has been pretty thoroughly normalized. Though offering it as a Firefox extension could be an interesting exercise.

I think publishers view AMP as a question of their sovereignty and choice. Since it's their website that's being potentially served by Google, it's their choice to make. There's absolutely a lot of room to dispute if this is the morally correct stance, but I also think it's not wildly out of line with other questions publishers weigh in choosing what they serve and how.

Re:Google no longer providing original URL in AMP for image ... by lern_too_spel on Thursday May 28, 2020 @12:05AM (#23333277)
> I wouldn’t opt in and now I cannot block Google tracking at the DNS level thanks to this.

How do signed exchanges break blocking Google tracking at the DNS level? You already need to have google.com unblocked in order to get a results page that serves an exchange from Google.