Email or username:

Password:

Forgot your password?
Simon's posts Post Back to profile
Top-level
Daniel

@simon Interesting! Can this perhaps be used for fingerprinting? πŸ‘€

9 July at 17:57 | Wall-to-wall | Open on chaos.social
15 comments
Simon Willison

@djh yeah, I imagine the fingerprinting risk is why they don't expose this functionality to everyone else

9 July at 18:01 | Open on fedi.simonwillison.net
Zachary Wander :thonk:

@simon @djh fingerprinting for me, not for thee

9 July at 19:00 | Open on androiddev.social
Vo

@wander1236 @simon @djh Also did you know Google has a subdomain called "stalk.google.com"

9 July at 20:45 | Open on noauthority.social
bennihtm
Vo
Hippo πŸ‰

@bennihtm maybe some extension to Google Talk? It's an appropriate domain though πŸ˜‚

@Vo@noauthority.social @wander1236 @simon @djh

10 July at 14:02 | Open on fosstodon.org
Jeff Triplett

@simon @djh I thought it was already established that Google fingerprints you via your account. I think making it private to them keeps others from using it for fingerprinting, but I apologize if I'm missing the point.

9 July at 19:35 | Open on mastodon.social
Timo Zimmermann

@webology @simon @djh I think the interesting part will be when Europe looks at this and invokes the DMA which should AFAIK apply here.

If this would be the case and if they would rule to open it up for everyone not just the company who already got all your data will be using it. :/

9 July at 19:38 | Open on social.screamingatmyscreen.com
Site Reliability EnbyπŸ³οΈβ€βš§οΈπŸπŸ”¦πŸ“ˆπŸΊπŸ‘—

@fallenhitokiri Or google could just remove their backdoor.

9 July at 21:44 | Open on tech.lgbt
Timo Zimmermann

@SiteRelEnby while I’d obviously prefer that I honestly don’t see Google make an ethical decision at this point :/

10 July at 4:05 | Open on social.screamingatmyscreen.com
Dan Herbert

@webology I think a major problem here is that the same API also works in Incognito mode. This would allow Google to fingerprint you even if signed out of your account and track you across incognito sessions.

And that's not to mention the fact that the API works even if you're signed out of a Google account so fingerprinting can be performed even without an account.

9 July at 23:58 | Open on mastodon.social
stefan

@simon But why would Google themselves need it for fingerprint given that the control the whole browser? Or do you mean "they need it for something else but it could be used for fingerprinting by others"? @djh

9 July at 20:23 | Open on graz.social
Christopher Schmidt

@stefan @simon @djh this is what I would mean by this statement, yeah.

11 July at 19:28 | Open on better.boston
Site Reliability EnbyπŸ³οΈβ€βš§οΈπŸπŸ”¦πŸ“ˆπŸΊπŸ‘—
ehrt74

@djh
Well, it could be, but there's no reason why it should. I think this is just to get performance metrics to be able to determine problems quicker.
@simon

10 July at 9:42 | Open on emacs.ch
Go Up