• LWD@lemm.ee
    link
    fedilink
    English
    arrow-up
    33
    ·
    2 days ago

    Very good point in this article that third-party cookies can be deleted but fingerprinting - like fingerprints themselves - cannot be. And quoting Google in 2019 before they decided to be even more evil than they are now.

    This might be the best article I’ve seen about the change, and it’s posted on a company blog.

    • Onno (VK6FLAB)@lemmy.radio
      link
      fedilink
      English
      arrow-up
      21
      arrow-down
      1
      ·
      edit-2
      2 days ago

      The article appears to be high on repetition and low on detail. I saw very little evidence supporting the claims and even less external resources.

      What I did see was lots of links to their products.

      I’m not saying that the article is wrong, just that it’s not great.

      This BBC article cites several organisations and explains how it’s done for example:

      Edit: Added link

      • LWD@lemm.ee
        link
        fedilink
        English
        arrow-up
        7
        ·
        2 days ago

        Touche. I didn’t realize how many of the links in Tuta’s blog post were to their own blog.

  • atro_city@fedia.io
    link
    fedilink
    arrow-up
    20
    ·
    2 days ago

    Digital fingerprinting collects and analyzes multiple data points from a user’s device - such as screen resolution, installed fonts, browser settings, and even battery status - to create a unique profile

    Why is all this information available in the first place? Why the hell does a website need to know which fonts are installed, which browser settings are active, and why the hell would it require the battery status? Why are browsers sharing that much information in the first place?

    • grue@lemmy.world
      link
      fedilink
      English
      arrow-up
      25
      arrow-down
      1
      ·
      edit-2
      2 days ago

      Because Javascript was a cancerous mistake. Web browsers should never have been scope-creeped to allow executable “apps” instead of “pages” of document markup.

        • Kernal64@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          1
          ·
          1 day ago

          There was no problem requiring a solution. Just like cars functioned perfectly fine as cars for decades before becoming gross, always online, data harvesting privacy invasion devices, the “solution” would have been to just not do that. Cars used to let you drive places just fine before jamming internet connections in them. Similarly, browsers used to let you browse the web just fine before we decided to abandon stand alone software development to jam everything in a browser.

          • atro_city@fedia.io
            link
            fedilink
            arrow-up
            2
            arrow-down
            3
            ·
            1 day ago

            I’m not sure what the solution is that you’re proposing. Web documents with links to download software instead of web apps? Am I understanding that right?

            • Kernal64@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              3
              arrow-down
              1
              ·
              1 day ago

              Web apps don’t need to exist, so yeah. A website should just be a website. If there’s something that NEEDS a whole ass application to run, that should be something you have the choice to download and install, not implemented in an invasive way in unrelated software meant to show some interactive text, images, and video.

              • atro_city@fedia.io
                link
                fedilink
                arrow-up
                2
                arrow-down
                4
                ·
                1 day ago

                You’re shouting at clouds old man. I thought you were going to propose an actual solution, not just weather against the times.

                • Kernal64@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  3
                  ·
                  edit-2
                  1 day ago

                  🙄

                  Your post asking for a solution was in the past tense. I answered in that context. Anyone following the discussion is able to see that. If you changed your frame of reference in your mind to the present day, you sure didn’t communicate that here, so that’s on you. How would we solve this problem today? I don’t think we can. Javascript and the like are way too entrenched and web apps are a way of life now. We’re stuck with this privacy invading nonsense until something drastic changes, but I don’t know that that change would look like.

    • 299792458ms@lemmy.zipOP
      link
      fedilink
      English
      arrow-up
      3
      ·
      2 days ago

      I suppose it queries for the fonts in any given website’s stylesheet font stack but I would not know better.

          • jagged_circle@feddit.nl
            link
            fedilink
            English
            arrow-up
            1
            ·
            1 day ago

            Because with proton you can send encrypted email to people off proton with PGP. Tutanota only sends encrypted mail to other people on tutanota.

            posteo.de is a better replacement for proton. They support PGP

            • Khlo@lemmy.blahaj.zone
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              1 day ago

              I’m personally more worried about what a company is doing with my data. I.e. Google reading your emails for “personalized ads” or just straight up selling my data.

              I feel confident that Tuta is not selling my data, and that’s what’s important to me.

              On top of this, I also use my own domain, posteo does not support custom domains.

              • jagged_circle@feddit.nl
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                1 day ago

                But every time you email someone else on gmail, google reads your data. Including all the companies using Google Workspace.

                But if you send PGP encrypted to a gmail user with a service that supports it (tutanota does not), then the recipients email provider can’t read it

  • Chozo@fedia.io
    link
    fedilink
    arrow-up
    3
    arrow-down
    3
    ·
    2 days ago

    I’m gonna be honest, I’m skeptical of the claims this article makes. Tuta has a history of using fake emails and “updates” from competitors in order to sell their product. Last year, they spread a screenshot on their Mastodon account of a fake email allegedly from Google, announcing that Gmail was shutting down. They were told in the post that their claim was inaccurate and that the “email” they were sharing was fake, but they left their post up anyway.

    It wasn’t until they were told that they could be sued for false advertisement that they removed the post. Their response was effectively “Oops, we forgot to fact-check it before going to bed”, which I’m not sure I believe, because how do you write an entire post based on a screenshot, with the intention to sell your product, and not think even for half a second “Hmm maybe I should confirm some of these wild claims I’m about to make”? It’s either malice or incompetence, neither of which instill trust.

    I’m not saying this to defend Google, just to highlight that Tuta doesn’t take issue with lying to potential customers, and that’s something you should know before you give them your money. If they’re willing to spread such a stupid and easily-disproven lie before you’re even a customer, what are they willing to lie about once you give them your credit card?