News for hackers. Stuff that matters.

A comment on Google has a secret deal with FB called “Jedi Blue” that they knew was illegal. Parent comment

Re:Google has a secret deal with FB called “Jedi Blue” that ... by aasasd on Sunday October 24, 2021 @09:53AM (#28977894)
Frankly, I'm not sure about the current state of things, seeing as it likely has changed several times in the past few years. However, a) I'm not sure why Goog would want to bother with browser accounts otherwise, and b) my use of Chrome ceased soonish after I had the following experience in the early 2010s:

- set up a new empty site, listed absolutely nowhere, on quite dedicated hosting.

- open it in Chrome.

- a couple minutes later, observe Googlebot appearing in the visitor logs of the site.

Lastly, if you go to the ‘My activity’ settings on Google, you can see: “Include Chrome history and activity from sites, apps, and devices that use Google services”, which I guess can still be dissected further. And I have some website visits from 2016 listed there: including Wikipedia, which doesn't seem to use Google Analytics currently (not sure about 2016)—though these could be visits through Google search.

Also, text in the linked tweet directly says that Google tracks users on third-party sites through Chrome.

[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by faster on Sunday October 24, 2021 @10:03AM (#28977980)
I expect bots on a new unadvertised site within minutes. I've seen it many times. Bots are always scanning, along with script kiddies.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by indymike on Sunday October 24, 2021 @10:35AM (#28978285)
It is far more likely that Google found the new site from telemetry from Chrome than it is a random bot, owned by Google scanned the site within seconds.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by monkeybutton on Sunday October 24, 2021 @12:13PM (#28979258)
Google also runs their own public DNS servers which afaik Chrome defaults to. They can just sit server side waiting for DNS lookups of domains they've never seen before and queue them up for the Google bot. No browser telemetry needed.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by aix1 on Sunday October 24, 2021 @02:14PM (#28980493)
> Google also runs their own public DNS servers which afaik Chrome defaults to.

The statement that Chrome does not honour the networking stack's DNS settings does not agree with my observational data. I run pi-hole DNS and Chrome absolutely fails to load domains blacklisted there.

[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by ev1 on Sunday October 24, 2021 @02:18PM (#28980541)
This is configurable, the default is to use the default network stack.

Settings > search for Use secure DNS for DNS-over-TLS.

[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by mysterydip on Sunday October 24, 2021 @12:38PM (#28979514)
Why does chrome need to use DNS other than what I have set up through my IP stack? How does that work for inranet sites?
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by monkeybutton on Sunday October 24, 2021 @01:08PM (#28979832)
Because they see their solution as more secure. Intranet sites still work because Chrome only prefers their DNS first, it will still use your system settings if it doesn't work.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by batch12 on Sunday October 24, 2021 @10:06AM (#28978021)
Seems testable by setting up randomized subdomains hosting http and visiting with different browsers. Also, make sure you aren't using Google's DNS services to resolve or managing your domain's DNS through their registrar.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by kevinmchugh on Sunday October 24, 2021 @11:57PM (#28984375)
> I'm not sure why Goog would want to bother with browser accounts otherwise

Cross-device sync of passwords, autofills, bookmarks, history, open tabs

[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by panarky on Sunday October 24, 2021 @01:38PM (#28980164)
Registered domain names are public information.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by jeltz on Monday October 25, 2021 @05:56AM (#28986058)
Yes, whois is public but not all TLDs publish a list all domains and those lists of are usually updated only once per day. On the other hand it is very possible that they used the TLS transparency logs from the CA.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by adriancr on Sunday October 24, 2021 @11:11AM (#28978630)
This could also be via dns records if you published some they would get scanned
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by TechBro8615 on Sunday October 24, 2021 @01:34PM (#28980135)
Cert transparency logs will show new subdomains too.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by selfhoster11 on Sunday October 24, 2021 @02:00PM (#28980367)
Not for wildcard certs, fortunately.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by samstave on Sunday October 24, 2021 @11:17AM (#28978686)
Also, doesnt chrome hijack DNS to point to googles DNS servers?
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by eptcyka on Sunday October 24, 2021 @12:09PM (#28979217)
Unless you've enabled DoH, it shouldn't.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by djbusby on Sunday October 24, 2021 @01:29PM (#28980091)
This whole thread is about Google doing things they shouldn't.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by Taywee on Sunday October 24, 2021 @03:22PM (#28981045)
Yes, and claims still require evidence. I'm quite anti-Google but I'm not going to just start believing in random theorizing of evil things they could conceivably be doing without evidence.
[ Parent | on HN ]
Re:Google has a secret deal with FB called “Jedi Blue” that ... by Drdrdrq on Sunday October 24, 2021 @04:20PM (#28981491)
Otoh, why even bother with Chrome, when you have Firefox, Brave and others to choose from? It's not like there is any substantial difference between them. At this point we don't need (extra) evidence of wrongdoing, the incentives mismatch is enough to not trust them.
[ Parent | on HN ]