Hacker News Reader

Comment by judge2020 | Hacker News Reader

judge2020

Google doesn't fingerprint browsers like other adtech networks do - that's why they're really pushing for on-device ad auctions[0] and removing the usefulness of third-party-cookie-based tracking all together[1]. It would strengthen their monopoly (other providers would have to invest in supporting this ad model) while also directly benefiting the consumer's privacy and not hurting their business model: ad clicks.

0: https://github.com/WICG/turtledove#turtledove

1: https://www.chromium.org/Home/chromium-privacy/privacy-sandb...

View on HN

>Google doesn't fingerprint browsers like other adtech networks do

Citation needed :)

I'm taking part in the Browser Fingerprinting Project that was on here recently[1] and the only browser that isn't marked in the test as trackable so far is Firefox[2]. They don't use cookies for the test so third-party cookie sandboxing or blocking is irrelevant. If Google doesn't use browser fingerprinting as you say then they really should fix Chrome.

1: https://browser-fingerprint.cs.fau.de

2: I test most mainstream browsers as I already had them installed on Windows and Android devices for testing.

Google definitely does browser fingerprinting. I have been running bots for years to collect pricing data. They check your gpu, bunch of stuff from navigator, etc. The only thing I have not seen them do is canvas fingerprinting.

They claim they do not use fingerprinting for user identification for advertising. Some people would say that this is a weaker claim than not using fingerprinting.

They have admitted to using those sorts of information for fraud detection to detect fake ad clicks, bulk account creation, or other malicious activity. I also suspect they do some clustering on this data to determine what accounts are related so if there is malicious behavior from a cluster of accounts that appear to be the same user they can act on the whole cluster.

But there is no evidence that they use fingerprinting for targeting advertising.

Fair, I have no evidence they use fingerprinting info for advertising.

They definitely cluster fingerprints to block whole groups as does any decent antibot.

They definitely do some form of fingerprinting for content optimization. After browsing in incognito, Youtube was sketchily on-topic.

(esoteric science/technical topics which wouldn't come up by chance)

The issue isnt that they did or didn't.

The issue is that they can

Ok. By what mechanism could Google prevent themselves from ever being able to do this? The browser can be updated to do anything. It could start deleting hard drives tomorrow with a malicious update!

>By what mechanism could Google prevent themselves from ever being able to do this?

The law.

The law cannot prevent you from doing something, it can only punish you if you do it.

that is a nonsense statement. "doing something" = "do it"

if you mean, cant stop you considering it, then thats fair, but then the point has no value?

I'm not sure I understand what you mean.

What's difficult about this? The law prevents people from doing the wrong thing every day using the threat of jail time or worse.

Claiming laws only punish actions taken so they can't be "preventitive" by preventing others from taking those actions is either naive or just plain intellectually dishonest.

The US is a country that has laws inaccessible to the public with no way of knowing whether you're breaking those laws. It's either naive or just plain intellectually dishonest to think that these laws exist as a preventative measure.

But one can break a law and get away with it. It's selectively enforced.

But the claim I was responding to was that it does not matter whether Google is doing this now, what matters is that they can do it. A law which imposes penalties on what you can do rather than what you are doing seems fraught.

> >By what mechanism could Google prevent themselves from ever being able to do this? > The law.

I'd really rather not see companies like Google (it any other, for that matter) making laws. Lobbying is bad enough.

To make an analogy, most places ban entering with a weapon unless you are law enforcement on official duty. Not because any Joe that has a gun has killed someone with it.

But the danger is that he/she can. Thats why guns are regulated. Information is not a harmless dingus. Its a weapon, just as the gun was in the last century. Do we need a war to discover this?

The web is still a gunslinging wild west. We need regulation. EU is light years ahead in this regard and might just save us all from the tyranny of the Greay whom we trust to act in good faith - because they say they will. This strikes me as quite naive on our part.

EU is light years ahead in propaganda, that's about it. It has its mouth full of GDPR while it's quietly preparing China-style firewall, tracked digital money and encryption ban.

Can you be more specific?

What technical thing can achieve the goal you want? No metaphors.

SO you want Information need to be regulated? is that your point?

>Information is not a harmless dingus. Its a weapon, just as the gun was in the last century.

This is a silly analogy, what is Google doing or planning to do with this information that is dangerous, and how does that stack up against the potential benefits of Google and other tech companies collecting this type of data?

>what is Google doing or planning to do with this information that is dangerous

That is not the right question because if a rogue US administration, that is, an administration willing to defy US courts and the US Constitution wanted Google's data, there is probably nothing Google could do to stop them from getting it.

(Such an administration could probably only get away with that during a time of national emergency, e.g., a war or a massive solar flare knocking out most of that nation's electricity for a month, but there are undemocratic elements in every country who are basically waiting for such national emergencies.)

At least I've never heard of a plan, from Google or anyone else, that would allow Google to successfully thwart, e.g., a surprise raid by thousands of US law-enforcement officers.

In other words, Google's data-collection practices are a menace (to US residents at least) even if we could be guaranteed that Google would never willingly use it in any bad way.

They can't without violating (or at least changing) their privacy policy.

You and all your friends are welcome to each bring an arbitration case against them if they have been doing it or if they do it without you agreeing to an updated privacy policy.

If they haven't, then you have nothing to complain about. If they change their privacy policies to allow it, then complain.

Reply on news.ycombinator.com