this post was submitted on 23 Oct 2023
118 points (85.1% liked)

Technology

59197 readers
2518 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

Google will soon start testing a new ‘IP protection’ feature for Chrome users, offering them greater control over their privacy. The tech giant the upcoming feature prevents websites from tracking users by hiding their IP address using proxy servers owned by Google.

To give you a quick recap, IP address is a unique numerical identifier that can be used to track a user’s geographical location and is used by advertisers to track a user’s browsing habits, see which websites they visit and provide personalized ads.

According to Google, the IP protection feature will be rolled out in multiple stages, with Phase 0 redirecting domains owned by Google (like Gmail) to a single proxy server. The company says the first phase will allow them to test its infrastructure and only a handful of users residing in the US will be enrolled.

Google also said that the upcoming IP protection feature will be available for users who have logged in to Chrome. To prevent misuse the tech giant will be implementing an authentication server that will set a quota for every user.

In the following phases, Google will start using a 2-hop proxy system, which essentially redirects a website’s request to a Google server that will again be redirected to an external CDN like Cloudflare.

While the IP protection feature might enhance user privacy, the tech giant has clarified that it is not a foolproof system. If a hacker is able to gain access to Google’s proxy server, they will be able to analyse all traffic passing through the network and even redirect users to malicious websites.

Since most of Google’s revenue comes from tracking users across the internet and offering them personalized ads, it will be interesting to see how the company strikes a balance between user privacy and revenue generation.

top 50 comments
sorted by: hot top controversial new old
[–] cmnybo@discuss.tchncs.de 141 points 1 year ago (1 children)

That will just allow google to track every website you visit.

[–] bus_factor@lemmy.world 111 points 1 year ago (4 children)

Both. It will prevent other sites from seeing some of your data, while giving Google more of your data. Of course Google wants to do this, it gives them a competitive edge. Smells like brewing lawsuits, though.

[–] radix@lemmy.world 31 points 1 year ago (1 children)

Using one dominant position (Chrome market share) to extend into another (data brokerage) is textbook Monopoly 101.

[–] bus_factor@lemmy.world 8 points 1 year ago

Yeah, we saw Microsoft do that with Windows and Internet Explorer back in the day.

[–] andrew@lemmy.stuart.fun 20 points 1 year ago (1 children)

Nobody can track what you're looking at*!

*For free any more because now they'll have to pay us for that data which we'll have wayyyy more of."

load more comments (1 replies)
[–] deegeese@sopuli.xyz 96 points 1 year ago (1 children)

Google’s idea of privacy is to capture all your activity through Google’s VPN so nobody but Google’s advertisers can see it.

[–] zingo@lemmy.ca 13 points 1 year ago* (last edited 1 year ago) (6 children)

Looks like a great business plan to me.

Edit: Firefox is a great option for more privacy.

Librewolf is a hardened fork of Firefox, but not for everyone. Although I am very happy with it personally.

load more comments (6 replies)
[–] A_Random_Idiot@lemmy.world 80 points 1 year ago* (last edited 1 year ago) (1 children)

Ah yes, filter all my internet browsing through google servers for ~~analysis, data harvesting and exploitation~~ "privacy"

Then again, anyone actually caring about privacy probably wouldnt be using chrome to begin with.

[–] CrayonRosary@lemmy.world 8 points 1 year ago

Don't worry. They'll "strike a balance"

[–] knobbysideup@lemm.ee 76 points 1 year ago

So a proxy of their own so Google can watch everything you do themselves? GTFO.

[–] RanchOnPancakes@lemmy.world 61 points 1 year ago (1 children)

Hopefully what it does is popup a message urging users to STOP USING GOOGLE CHROME

[–] andrew@lemmy.stuart.fun 19 points 1 year ago* (last edited 1 year ago)

That's pretty brilliant, actually.

I propose a nice server side open source library that will replace pages served from Google IP space with redirects to the Firefox download page. Or just a page presenting the problem and danger.

Or like an nginx plug-in. So many options.

[–] Knusper@feddit.de 44 points 1 year ago

Guess, AMP didn't give them enough control over servers, now they also want to capture the clients.

[–] Fades@lemmy.world 41 points 1 year ago (1 children)
[–] aeternum@kbin.social 12 points 1 year ago (1 children)
[–] BearOfaTime@lemm.ee 2 points 1 year ago

Por que no los dos?

[–] Blackmist@feddit.uk 34 points 1 year ago (2 children)

Well that would be great if Google wasn't the main culprit trying to track me.

Is that really the best business plan they have now? Stop everyone else tracking you so their own data is worth more?

load more comments (2 replies)
[–] 0oWow@lemmy.world 31 points 1 year ago (1 children)

So this is Google’s version of Microsoft tracking. Microsoft does it with Windows and Edge, Google does it with proxies. Sad.

[–] Ghostalmedia@lemmy.world 7 points 1 year ago

I would wager that this is probably more of a response to iOS and Apple’s encrypted proxy “Private Relay” feature.

Google doesn’t care about Edge. If you look at the browser stats, mobile Safari is their major competitor. Especially in the states.

[–] jet@hackertalks.com 31 points 1 year ago

This will be great from a privacy perspective, because it will legitimize VPN endpoints.

If nothing else after your super private paranoid VPN journey, you could terminate the traffic in a Chrome proxy, and the other site wouldn't be able to discriminate against you.

[–] Treczoks@lemm.ee 23 points 1 year ago

So instead of the websites tracking me, it would just be google that does so. With much more control and detail than ever. And then google will sell that information to those websites for even mroe profit!

[–] db2@sopuli.xyz 21 points 1 year ago (1 children)

Well we know what'll happen to this service, especially if it works. https://killedbygoogle.com/

[–] tony@lemmy.hoyle.me.uk 42 points 1 year ago* (last edited 1 year ago) (1 children)

It gives google access to all the traffic statistics for users of chrome, not just those going via google. That's valuable marketing data. They also have made sure that nobody else can get that data - they have to buy it from google as they become the sole source of it.

That's why they want to do it.. nothing to do with 'privacy'.

[–] sic_semper_tyrannis@feddit.ch 9 points 1 year ago (1 children)

Sounds like what Apple's been doing recently

[–] macallik@kbin.social 7 points 1 year ago* (last edited 1 year ago) (1 children)

This post seemed to put things in context a bit better as it sounds like Google's two-proxy hopping is what Apple does as well:
https://reddit.com/r/apple/comments/xo8ha0/_/iq5e40h/?context=1

The difference (AFAIK) is that Apple's business is less-centered around profiting off users' data, so they're less liable to use the data, while Google will almost certainly use the data.

[–] deranger@sh.itjust.works 8 points 1 year ago (1 children)

That link makes it seem like Apple can’t read what you’re doing, so it’s different from Google.

This is where Private Relay comes in. When enabled, the addresses you visit are encrypted on your device, and then handed to Apple (who can’t read it - think of it as handing a sealed envelope to a letter carrier). Apple then passes these onto Cloudflare 1.1.1.1 DNS. Cloudflare only sees that they came from Apple, so they have no idea who the actual person is. In this sense, only Apple knows who you are, and only Cloudflare knows what website you visited, so it’s more private (unless both companies collude to match up the data). The technical term for this is Oblivious DNS over HTTPS.

[–] macallik@kbin.social 5 points 1 year ago

True, but w/ a caveat at the bottom:

At the end of the day, you have to remember that Apple devices are essentially a sealed unit. Any claims they make about privacy cannot be proven - they could slip tracking and keyloggers into every device, and unless you build a device from scratch and program it yourself, there’s nothing you can do about it. You have to trust that they won’t do that, and Apple is in a relatively unique position (particularly compared to google and facebook) in that the business isn’t designed to profit from this, so they have no real reason to do so.

[–] DarkThoughts@kbin.social 20 points 1 year ago (1 children)

Google will soon start testing a new ‘IP protection’ feature for Chrome users, offering them greater control over their privacy. The tech giant the upcoming feature prevents websites from tracking users by hiding their IP address using proxy servers owned by Google.

Jesus fucking Christ...
I wonder how much Indianexpress gets paid for this bullshit advertisement.

[–] macallik@kbin.social 4 points 1 year ago

This was actually the least-biased coverage of the day:
https://www.techmeme.com/231023/p18#a231023p18

[–] Zealousideal_Fox900@lemmy.world 19 points 1 year ago

THE FUCKING IRONY

[–] RandomVideos@programming.dev 12 points 1 year ago (1 children)

So instead of giving random websites your general location, you give google everything you do on the web?

load more comments (1 replies)
[–] Haywire@lemm.ee 6 points 1 year ago

I'm using Google's VPN now. They promised they won't look. Honestly I think a lot.more is leaked via the GBoard keyboard, but what do I know.

[–] iopq@lemmy.world 6 points 1 year ago (9 children)

This would actually be good, because combined with encrypted client hello, a TLS connection to some website would only be identifiable by the IP and DNS queries. You don't have to use Google's DNS either.

So Google will basically see that you're connecting to a cloudflare hosted website or whatever the case is. Doesn't help much because they can't see encrypted data

[–] muntedcrocodile@lemmy.world 9 points 1 year ago (1 children)

Googles ships the browser wich ships with the root certificates which they can update remotly as the see fit im sure u can see the issue here.

[–] fubo@lemmy.world 2 points 1 year ago* (last edited 1 year ago)

Doing that would cause all corporations and governments to switch to Edge immediately. Google actually built infra to make it impossible to get away with this kind of hijacking: look up Certificate Transparency.

load more comments (8 replies)
load more comments
view more: next ›