Hacker News Reader

I'm more concerned about the opt-out "safe browsing" feature CCing Google on all your requests, complete with ID cookie. When did that cease to be a cardinal sin? Didn't Palm get reamed for that recently?

View on HN

It doesn't do that on all your requests, does it? I thought everyone did that via local bloom table (or similar structure), and checking with a central backend only when it gets a potential hit.

My bad, it does not appear to be hitting the safe browsing service on every request but just a few times soon after the first request of a session. I guess it's probably just updating the bloom filter.

They're still not off the hook for doing autocomplete on the server by default. That effectively gives them every typed in URL.

Reply on news.ycombinator.com