Email or username:

Password:

Forgot your password?
nilesh

Remember kids, there's a pernicious reason why #Google redirects "maps.google.com" to "google.com/maps".

Because of this redirect, the location permission that you grant to Google Maps also automatically becomes available to Google Search - making your search queries more valuable to advertisers.

#privacy

66 comments
Irenes (many)

@nilesh as an ex-Google privacy person it makes us very happy that people who aren't under NDAs talk about this (you're the second we've seen to mention it, the first was several years ago. might have also been you actually, can't remember)

Peter Kovář

@nilesh Delete Analphabet Incorporated!

Now And Then.

jwz

@nilesh They could have accomplished this anyway with browser fingerprinting and such; this just makes it easier and cheaper for them. I only mention this to point out that the problem is not domain names, the problem is that Google is a trash company.

Wes

@jwz @nilesh I mean, they own most people's browser. They can grant themselves whatever permissions they want, however they want.

Khleedril

@calmeilles @jwz @nilesh This is the thing which seems to have passed everybody by: when Google dropped the 'Do no evil' bye-line, that was a direct indication that they were now going to do evil (otherwise they wouldn't have dropped it), and nobody cared about that.

jwz

@khleedril @calmeilles @nilesh It was always bullshit. (Actually the term-of-art is "bluster".) They always defined "evil" as "lack of fiduciary duty to shareholders". Certainly the term wasn't defined in the TOS or articles of incorporation. I'm sure the only reason they scrubbed it was merely the lawyerly instinct to delete anything that reflects personality or humor.

Paul in de Emiraten

@jwz @nilesh people are trash too. I’ve been told that if id pay €8,50 per month Google could run its services without selling adds cq my privacy.
Can anyone confirm that amount? I would be happy to pay it.

Max

@Paul_Harts @jwz @nilesh But even if it were true, they would charge you and still sell your data which would double their profits. It's win win! (where Google wins twice)

Paul in de Emiraten

@PossiblyMax @jwz @nilesh I see your point. And to answer your question I distrust them less than I used to do but still avoid them when I can. Unfortunately Maps of Apple is no use at all in the Emirates.

Gergovie

@Paul_Harts @jwz @nilesh

You can't trust any word they say. Their business is to spy you. Nothing else.

Lord Caramac the Clueless, KSC

@jwz @nilesh All companies either turn into monstrosities or vanish in the long run.

Bjornsdottirs

@LordCaramac @jwz @nilesh If they do neither they still endlessly struggle

SPACEFALL

@nilesh The concept of Holy See has become muddied with business of limit of understanding using mind and language.
The seed of privacy is another imperial exploration of emerging human needs.
It's rare to see holy see but it's fair to see curiosity of what makes an electron?
Plato still dominates religions. The technology is being exploited for the immense business of inner privacy of each individual.
I feel strange why Ludwig Eduard Boltzmann committed suicide on 5 September 1906?

GunChleoc

@vandorb12 Organic Maps is a great app f-droid.org/en/packages/app.or

You can download the when at home maps and use it offline later, so it makes you less dependent on a constant internet connection.

Unless you need current traffic jam/roadworks information, there's no need for Google Maps.

gonzalo

@gunchleoc @vandorb12 a good alternative to Google maps is also Sygic. It works super!

vandorb12

@gonzalo @gunchleoc great recommendations, but apps don't satisfy hunger.
So where can I get organically sourced, farm to table maps?

GunChleoc

@vandorb12 @gonzalo I don't know. Maybe you can find a shop on the map

Mario

@gunchleoc @vandorb12 if you are looking for an alternative within the Google play store I suggest mapy.cz
You can download countries or regions and the it works also offline

ベンツくん

@nilesh The actual reason has nothing to do with this and everything to do with the Maps Frontend moving from its own binary to a plugin in the Google.com webserver.

Urja

@bentsukun @nilesh

There's no reason you couldn't have just pointed maps.google.com to the same servers on the DNS level, so.... 🤨​

ベンツくん

@cartocalypse @nilesh Yes. The one webserver binary, which is running thousands of instances, of course. It's called GWS, you can find many references to it. Google has many other binaries that serve http but this is the one serving google dot com.

Wortex17

@bentsukun @cartocalypse @nilesh So GWS is not capable of port forwarding or supporting aliases/CNAME? Impressive.

shrimp eating mammal 🦐

@bentsukun @nilesh LOL your employer sucks so hard that nobody will believe you even if you're right

klausfiend

@nilesh I would also like it if the Google Maps app would stop attempting to sign me in on mobile.

I'm still using Google Authenticator which means I think I'm stuck with cached Google credentials on my phone, and big G has a way of insinuating itself into fucking everything once you give it a toehold.

GunChleoc

@klausfiend @nilesh Do you have a requirement to use a specific authenticator app? If not, you could get an open source one from F-Droid search.f-droid.org/?q=authenti

klausfiend

@gunchleoc @nilesh Not especially. Inertia is a thing, though, and the usual anxieties about migration/recovery (Google Authenticator to its credit makes it easy to transfer 2FA info between devices)

Hotte

@klausfiend @gunchleoc @nilesh
Aegis is really great as 2FA, with automatic backups and biometric security.

GunChleoc

@AnCaoladoir @klausfiend @nilesh I sort of picked FreeOTP at random.

I guess I should look around for one that has password protection, but I was being lazy at the time. I'm only using it for my social media accounts, so it's not that critical.

Ed Berrevoets

@klausfiend @nilesh in many cases you don’t need an Authenticator at all. It’s built in in iOS under passwords. Select the appropriate service and there it is: verification cordes.

klausfiend

@NetBerry @nilesh Wait, what? iOS has built-in TOTP generators? Since when? How did I miss this ...

Ed Berrevoets

@klausfiend @nilesh yup. I love it. Get out of my way, #Google spythenticator and #Microsoft #authenticator. It came somewhere in 2021 already as you can read here: support.apple.com/guide/iphone #totp

Johnny ‘Decimal’ Noble

@nilesh True story: my Irish mate Paddy got so drunk one night, he forgot what happened.

He’s an Android user. So he just opened his Google account and it told him exactly, minute-by-minute, where he’d been.

He had _not_ been using Google Maps all night.

Simon Müller :sparkles_trans:

@nilesh oh thats a VERY interesting point, I haven't considered that until now

Bravo for noticing/knowing about it 👏

DELETED

@nilesh You can also rescind permissions by clicking on the site's icon and changing them.

m0xEE

@joesabin
Those who are knowledgeable enough to withdraw permissions or use some sort of extension to only grant them temporarily, know all these tricks anyway. Unfortunately, most people never even think about them doing something like this😫
@nilesh

DELETED

@m0xee @nilesh Thus the reason I mentioned it. Those that got stuck can unstick themselves by clicking the icon and removing the permission. It shows right up.

Mike Vosseller

@nilesh wonder if Apple could / would allow “path” based permissions? ie only give location under /maps?

StarkRG

@nilesh I don't use Google search anymore, unfortunately I haven't yet found an acceptable replacement for Google maps, particularly the mobile app. At least I can limit it to only tracking me when I actively use it.

Pasquale

@StarkRG @nilesh Try Magic Earth, I use it since a few weeks, and I am very happy with it.
magicearth.com/

Wes Plate

@nilesh can you recommend an article explaining the downside to advertisers showing me products I’m interested in? Isn’t serving non-personalized ads a waste of everyone’s time?

Gerard Cunningham ✒️

@nilesh I'd almost live with that, if the URL told me what I wanted to know, but they've somehow managed to simultaneously make it worse.

CounselorBecky🖖🏳️‍🌈🏳️‍⚧️🇺🇦🗳🌊😊

The more you know... 😳😬 Now, where did I put that extra large Rand McNally road atlas?

@nilesh

sj_zero
OpenStreetMap is pretty amazing, and it can be self-hosted if need be.
Miriam Jacobs

@nilesh and this is why I no longer use google maps.

Dec.tar.bz2

@nilesh
I just tried in a WWW browser with a few EU ccTLDs and got:

maps.google.fr -> consent.google.fr -> "REJECT ALL" -> google.fr/maps/(lat,lon)

But the map is always centred over close to where I am now (by IP address).
Location permission is off.

Exactly the same redirect URLs with ie,it,de,es.

In the good old days, browsing to maps.google.ie was a shortcut for "Maps, but centred over the island of Ireland" (or the equivalent for whatever ccTLD I typed in).

@nilesh
I just tried in a WWW browser with a few EU ccTLDs and got:

maps.google.fr -> consent.google.fr -> "REJECT ALL" -> google.fr/maps/(lat,lon)

But the map is always centred over close to where I am now (by IP address).
Location permission is off.

Exactly the same redirect URLs with ie,it,de,es.

slyborg

@nilesh Good thing I don’t use Google Search since it’s kind of turned into complete hot garbage.

P J Evans

@nilesh
And this is why they DON'T get that permission from me.

Rick :swift: 6x💉😷🇺🇦

@nilesh too bad you can’t nckude parts of the path in the permissions specifications

dankendirekt

@nilesh
This is why I choose to slum it with OSM

DELETED

@nilesh what the fuck???!?;!????? really????!?!!?!?

thankfully i always deny location access to google search, this is insane to hear

Kaan Barmore-Genç

@nilesh I keep seeing this repeated, but that's not how the Geolocation API works. There is no way for a website to check if you gave permission or not, they can only attempt to read your location which will trigger a prompt if you haven't given permission yet.

So if you visit Google Maps and give permission, then revoke your permission in browser settings, if Google ever tried to read your location in an ad you would suddenly get a location prompt. I have never heard of that happening.

Patrick Pfeifer

@nilesh arrrg. Thanks for this!!!

I'm feeling really stupid that I haven't ever thought about that. I was wondering what the reason was many times.

enthraxxx

@nilesh What about going to that URL incognito?

I just tried and there's a slight change: it asks for consent and then it asks if it can open the app.

So the moral of the story is never go to Google without a cloak?

KarlE

@nilesh I only use Google Maps (*if* I use it - most times, I use openstreetmap) in the Private Browsing window. I am well aware that browser fingerprinting can still leak my browser identity but at least it makes it a bit harder - cookies are contained. Of course I do not use a Google account. @isotopp

Go Up