Re: What are the security concerns with Chrome?

Awebb wrote:

If you state that the whole Chrome issue is over-rated, it seems to imply that the whole privacy and security discussion is over-rated. I have to oppose such statements with a strong answer, because it takes a lot of work to create a public conscience regarding those problems, but it only takes a few words to block the minds of thousands from evolving to a state of knowledge intense enough to have a sophisticated opinion about the issue.

Fair enough smile A better choice of words would have conveyed the meaning without inducing spongeheadedness wink

A Creative Commoner | My images at Google+ | A Waldorf Review

Silence is sometimes the best answer - Dalai Lama.

Re: What are the security concerns with Chrome?

omns, thanks for clarifying that.

Now how do you factor in "not wrong" but things that do shape how you will be marketed at either personally or via friend recommendations (now that much of this is being done through the online social graph, which Google has invested itself a lot in lately) and it is something you/we/everyone should be thinking about.

For example let's use medical conditions. Let's say I am interested in finding out about researching something so I use a search engine. Normal enough. There's that data point which will then be shared for targeted marketing from pharmaceutical companies. Whatever, it's annoying but I'm used that since it's almost always been like that.

Here's what's newer about it though- the use of those within my entire social graph (friends, family, acquaintances and business contacts) to help tailor a marketing plan to me.

What happens when simply browsing an article has left a "kilroy was here" marker with my name and avatar on the site showing what I'm reading because I forgot to log out of another site that's friend connected? What if my browsing habits are used to suggest a 'helpful' (and probably underwritten) article as suggested reading to my closest contacts, or a much worse case, casual or potential business contacts so they can sideways market to me? 

Google/Facebook. etc. and the advertisers using them probably know more about me than I do at this point, but that doesn't mean that I want every aspect of my life broadcasted to every single person everyone I know, just to make a few more dollars. But this is where we are in a lot of ways already and we are headed to even more intrusiveness, so while online profiling for advertising doesn't affect some at people all, it affects others a great deal. And non-participation is not really an option.

Last edited by chillicampari (2011-01-15 22:04:18)

Re: What are the security concerns with Chrome?

chillicampari wrote:

Now how do you factor in "not wrong" but things that do shape how you will be marketed at either personally or via friend recommendations (now that much of this is being done through the online social graph, which Google has invested itself in lately) and it is something you do need to worry about.

Do you have any links on that, I'd like to read more about it. There are a lot of 'what ifs' in this argument.

A Creative Commoner | My images at Google+ | A Waldorf Review

Silence is sometimes the best answer - Dalai Lama.

Re: What are the security concerns with Chrome?

For me the question is "what" does chrome do with your browsing history/cached content?  Anyone with any hard facts, would be greatly appreciated.  Its clear that Google services analyze cached content and manipulate(I like that awebb) content dynamically based on that. Like illumin8 stated any browser is gonna give you those results.  Outside of address bar based searches being piped into google's autocomplete search feature, I'm not sure exactly what else chrome does.  I don't like the idea of it updating withought me knowing.  Can it do that in a Linux filesystem?  Isn't that what the google apt repo is for, to update it?  Being a proprietary black box it's impossible to say what it actually does, especially since the time It'd take to reverse engineer it, it will already be updated and different.  Now, if it does something terribly malicious, this is even found in opensource projects like OpenBSD, with the netsec backdoor.  sad

Not to stray from the topic, but I feel that the OpenSource world has its flaws like mentioned above in the OpenBSD plug.  If a human hand has touched it, it's not perfect.  Like the GNU licenses and what not.  They don't seem truly free because of the "but" involved in copy-lefting.  The BSD liscensing seems almost perfect because there is no "buts" involved.  True freedom has no restrictions what so ever, no requirements.  There is probably something in there that messes it up though(edit: BSDL).  Anyways, I thought about that a lot over Xmas, and I maybe totally wrong/ignorant on the GPL etc.  Which all that brings me to my kind of vibe/ life movement.  I just can't live in fear or everything will suck.  Just do the best with the knowledge that's been granted me, pick and choose battles.  Until I know chrome is trully borkin me I'll keep using it because it works great.

@awebb, your discipline is awesome.. keep up the good work.. stay happy

@campari love your scenarios.. you've got a gift for writing

@illumin8 Your a haus bro, like how you broke down what security is.. and not to confuse it with privacy

edit: @omns sorry to leave you out pal when I was really thinking this earlier.  I appreciate the environment you created for discussion, while evading strife.  These discussions are good and give us all such an opportunity to grow.

Last edited by rstrcogburn (2011-01-15 00:55:12)

Well, you gotta live no matter what happens.  -Dallas (John Ford's Stagecoach 1939 Public Domain)

Re: What are the security concerns with Chrome?

omns wrote:

Do you have any links on that, I'd like to read more about it.

http://www.google.com/support/websearch … wer=165228

This is Google's quick explanation of their (your) social graph. Something to keep in mind when reading is the ever-changing definition of "public" vs. "private" content. Once again I will mention the Buzz fiasco since that was a point of redefinition. 

Facebook has a lot of documentation for app developers, much of it is available here:

http://forum.developers.facebook.net/

^^^ That doesn't cover what is for internal use though, since that's proprietary information.

Right now the bulk of the active graph is driven from ourselves on the social wheel. I am a hub that recommends products and services via active sharing/user generated or interacted with content (links, reviews, game activity if I did that, purchases broadcast via a Beacon type service if I forgot to check a box somewhere, rental activity, etc.).  The data flow for the most part is outward (though my hub is constantly receiving inflow from those I know, that is being marketed to me). But the savvy marketer (ethical or not) will find a way use those existing connections to build a solid cross-flow (peer-driven) model using that same graph. And even if it means violating a bit of privacy here and there, shrug. It's just business and all.

There are a lot of 'what ifs' in this argument.

Heh, okay. Called on it. smile

Those "what if's" (while written in a general voice), actually pertain to my real life and real life issues and things I have to keep in mind when I use the internet. I wasn't really planning on sharing that here, but if you must know exactly what it is to acknowledge that I do have a real argument and legitimate concerns for both current and future models of data sharing, I can send you** a PM if you wish.

(** this is for omns only)

Last edited by chillicampari (2011-01-15 01:35:06)

Re: What are the security concerns with Chrome?

chillicampari wrote:

http://www.google.com/support/websearch … wer=165228

This is Google's quick explanation of their (your) social graph.

So the key in this situation is not to engage with the social wheel/profle concept if you don't want to. Like Buzz and Wave, Google might find this idea doesn't take off as much as they think it will. I've never activated my Google profile and see don't any benefit in doing so. I think what is important here is that social wheel setups like Google Profiles and Facebook always have choices to participate or not. Our role then should as Awebb described and provide enough informed discussion for people to make meaningful and informed choices about their online interactions.

chillicampari wrote:

Those "what if's" (while written in a general voice), actually pertain to my real life and real life issues and things I have to keep in mind when I use the internet. I wasn't really planning on sharing that here, but if you must know exactly what it is to acknowledged that I do have a real argument and legitimate concerns for both current and future models of data sharing, I can send you** a PM if you wish.

(** this is for omns only)

No need for a PM, I know exactly what you mean. My real life requires that I have to be very careful about how my public profile is perceived as well smile

A Creative Commoner | My images at Google+ | A Waldorf Review

Silence is sometimes the best answer - Dalai Lama.

Re: What are the security concerns with Chrome?

omns wrote:

So the key in this situation is not to engage with the social wheel/profle concept if you don't want to. ..

It would sure make things a lot easier. smile But not interacting isn't really an option in my case (and I suspect many others). If someone I know as a friend, family or potential business contact is participating, and I need to engage with them in an arena they are comfortable with (Facebook, Twitter, etc.) I am part of that wheel also. Even blogs are becoming more integrated with networks via Disqus and other portable identity management systems. My hope is that some day a lot of this is rethought out***. Even as little as five years ago a lot of these issues didn't exist (or were not in the foreground). We're a lot more connected now and for a lot of us, we have new things to keep an eye out for.  Edit to add- I didn't have an activated public Google profile either, just a Gmail account. I still got Buzz and an unasked for social network generated from my email contacts anyway, and I was opted in as many were without asking or even a prior notice.

As a sort of side note and feel free to laugh- I forgot to log out of Disqus once so my business made an accidental official statement on an amusing cat video. Yes, I felt like a total dumbass. big_smile 

No need for a PM, I know exactly what you mean. My real life requires that I have to be very careful about how my public profile is perceived as well smile

Exactly. smile

*** The Disapora model looks like it's trying to make a lot of this more manageable from the user end, or at least trying to. I also like the identi.ca way of doing things where it is clear that you are (with the exception of DM) using a public system (so no illusion of privacy with so-called "protected timelines").

Last edited by chillicampari (2011-01-17 03:10:52)

Re: What are the security concerns with Chrome?

What about using 'Iron Browser'?

Re: What are the security concerns with Chrome?

disconnect extension & a different search engine seems to clean up chrome. I'm I wrong? I don't have a facebook account yet disconnect is blocking them all the time. I use google gmail/chrome/search engine so I feel I'm asking for google to track me, but facebook?

Re: What are the security concerns with Chrome?

@ Hanna way back on the first page you said that you thought that chrome was ugly. you can get skins like Firefox and spoof it up a bit (i hate chrome the way that it comes)

i use chrome and i find it much more reliable then internet explorer and Firefox. Firefox is to slow and internet explorer just sucks! (Microsoft)

registered Linux user: #533379
registered #! user: #6769
Whenever someone calls me a computer 'nerd' or a 'Unix-based-system'
all I can think is: You just wait. In a couple of years. I'll be your IT. Then where will you be!

Re: What are the security concerns with Chrome?

Awebb wrote:

Anyone giving my mail address away without asking me, will suffer consequences, either personal or legal.

I'm curious here, has your careful guarding of your email address meant that you get no spam emails? I'm only moderately careful, and I get from 50 to 100 on an average day, along with maybe a dozen real messages. However, Thunderbird's spam filter, along with a couple of extra message rules I put in, catches some 95% of them so the end result is say 2 or 3 spam along with the genuine mails, which is quite livable I think. So, do you really need to be so paranoid about an email address?

John
------------------------
( a boring Japan blog , and idle twitterings )
“Good morning sir, which way up would you like your reality today?”  "As it comes, Jeeves, as it comes..."

Re: What are the security concerns with Chrome?

johnraff wrote:

[I'm curious here, has your careful guarding of your email address meant that you get no spam emails? I'm only moderately careful, and I get from 50 to 100 on an average day, along with maybe a dozen real messages.

I do not get any spam mails.
And I don't miss them. tongue



/

Re: What are the security concerns with Chrome?

johnraff wrote:

I'm curious here, has your careful guarding of your email address meant that you get no spam emails?

No. I have more than one mail address. The one is for very private use only as well as official things. This mail address will not be allowed to be public. The other one is for every day use. It's generic and not very relevant.

I'm so meta, even this acronym

Re: What are the security concerns with Chrome?

I wouldn't say I'm overly concerned with privacy. I use facebook, gmail, and  even a hotmail (gasp!) address I made well over a decade ago. All of the stuff I do in gmail and on facebook I am very much aware isn't private. Most of the stuff that I spend my hard earned money on is really cool and difficult to come by too so if google wants to advertise it they're more than welcome! I still don't like the idea of a browser collecting anonymous statistics about the sites I browse without my explicit approval though. Doesn't mozilla also send anonymous usage statistics to google as well? I always figured if you are super concerned about privacy it's best to use something like midori.

Re: What are the security concerns with Chrome?

I am concerned about privacy and I wonder if installing the Ghostery extension in both, Iceweasel and Chromium as well as the search engine duckduckgo will improve privacy for me. Pls see also
http://donttrack.us/
http://ghostery.com/about     -> makes tracking more transparent and gives users choice to opt in or out
http://duckduckgo.com/about.html  -> promises not to disclose user's data to sites clicked out of search results.
What are your opinions in regard of those?

I will try Midori browser  on my system as of today. Slowdriver

BTW: very good discussion - IMHO this topic needs more attention in public.