Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Chrome Browser (Google) combats IE8's Privacy Tools
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Security Software Updates - 04 Sep 2008 »
« Virus - Please Help  
AuthorAll Replies

Mele20
Premium
join:2001-06-05
Hilo, HI


1 edit
reply to SUMware
Re: Chrome BETA Available

The EULA is just as horrible and privacy impacting as the EULA for Netscape 8 that so many criticized severely. Netscape is no more and I believe that is partly because of AOL's offensive EULA for Netscape. It will be interesting to see if users just didn't like AOL or actually saw the evilness in the Eula because they should respond exactly the same for the Google Chrome EULA: avoid Chrome totally.

Eulalyzer says this is an extremely long EULA (calculated to make users not bother reading it because of it length) with a high calculated interest. Eulayzer flags the advertisement clauses, one in particular, in the RED at level 8. Eulalyzer also flags the clause that bothers me the most and it is very much like that of the now defunct Netscape8 that most of us avoided like the plague although it is slightly less offensive:

"Software updates

12.1 The Software which you use may automatically download and install updates from time to time from Google. These updates are designed to improve, enhance and further develop the Services and may take the form of bug fixes, enhanced functions, new software modules and completely new versions. You agree to receive such updates (and permit Google to deliver these to you) as part of your use of the Services."

The above clause gives Google the right to do anything they want on your computer without your prior knowledge as you have basically consented to giving them ownership of your computer. Aside from all privacy concerns, I would, after reading the above clause, NEVER install this software just as I never installed Netscape 8. I hope Chrome suffers the same fate that Netscape did.

edit: fixed typo
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
·Verizon Online DSL

One thing about a EULA is that it can be changed so what you do now Marilyn is put your own brand of thoughts into something that is worthy of feedback and tell Google that you will or will not use their browser based on the EULA and then quote the pertinent parts of it that offend you.

Feedback Feedback Feedback Feedback
--
"Lego Succurro Lima"


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
·Verizon Online DSL

reply to Mele20
Click for full size
Chrome
Click for full size
Incognito Mode
Not a bad looking browser.

-Tabs swap quickly and bookmarks are easy to manage and create.

-History & Downloads are given their own tabs with logical layout. The address bar is similar to the Fx Awesome Bar which I like.

-Very basic options panel.

-Search plugins are easy to change although Chrome did not see Fx installed but I am using the trunk so that is not surprising.

Cookie Options are similar to Fx w/ third party special handling.

Font options are few and I did not see any link color options but I admit I gave it a quick once over.

Maybe in 6 months I will revisit it. Left some feedback for Google to ponder along with EULA feedback although being Google I doubt the EULA will change much.
--
"Lego Succurro Lima"

Mele20
Premium
join:2001-06-05
Hilo, HI

said by Grail Knight See Profile :

Cookie Options are similar to Fx w/ third party special handling.

Font options are few and I did not see any link color options but I admit I gave it a quick once over.

Maybe in 6 months I will revisit it. Left some feedback for Google to ponder along with EULA feedback although being Google I doubt the EULA will change much.
I don't have it to test but others in GRC newsgroups are reporting that it leaks TPC just like Fx. Not nearly as bad as all versions of IE (including IE8beta2) which is totally incapable of blocking TPC. Chrome blocks incoming TPC but fails on outgoing just as Fx does so if a cookie is acquired as FP, Chrome, like Fx, will return it to a THIRD party requester. But at least Chrome, like Fx, block incoming TPC which IE is incapable of doing.

Evidently also (according to GRC NG posts) there is no distinction between session and permanent cookies and no way to delete all session cookies at the end of the session. There is no white or black list. Even if I did not object strenuously to the EULA, I would not be interested in a browser with such primitive cookie handling.

There is no way I can provide feedback to Google because Google requires that you have an account with them if you wish to provide feedback. I have no intention of ever having an account with Google. They should have some other method for providing feedback for those of us not wishing to establish a Google account.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason


Sparrow
Crystal Sky
Premium
join:2002-12-03
Sachakhand


1 edit
Uninstall the beta, Mele, and you will be automatically redirected to a feedback page. That is where I posted my concerns.

I don't need Google to verify they received my concerns, I know they will read them or at least take a head count on the radio button options as to why you uninstalled the browser.

Other than the EULA, posters complaining about the lack of amenities currently being offered, please keep in mind that 2 September 2008 is BETA day, not Final Release day.
--
"Be simple, be earnest and spread that simplicity throughout everything you do."


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
·Verizon Online DSL

reply to Mele20
quote:
I don't have it to test but others in GRC newsgroups are reporting that it leaks TPC just like Fx.
GRC results do not excite me like they do others considering I know of Fx test results from a properly configured browser and people I trust to test correctly that passes the GRC tests.
--------------
As for the EULA it is what it is and Google makes money from collecting providing ads based on what data they collect in return they offer free programs that are very good and superior search results. Their browser will come along no doubt but not without feedback.

quote:
There is no way I can provide feedback to Google because Google requires that you have an account with them if you wish to provide feedback. I have no intention of ever having an account with Google.
Is it that hard to make up information for a throw away account?
--
"Lego Succurro Lima"

SUMware
Premium
join:2002-05-21

reply to Mele20
said by Mele20 See Profile :

I don't have it to test but others in GRC newsgroups are reporting that it leaks TPC just like Fx. Not nearly as bad as all versions of IE (including IE8beta2) which is totally incapable of blocking TPC. Chrome blocks incoming TPC but fails on outgoing just as Fx does so if a cookie is acquired as FP, Chrome, like Fx, will return it to a THIRD party requester. But at least Chrome, like Fx, block incoming TPC which IE is incapable of doing.
Firefox 3 does not leak incoming and outgoing TPC on XP nor Linux on my box as tested numerous times at GRC.


Lanik
Lab-nik
Premium,ExMod 2002-03
join:2001-06-25
Bay Area

reply to Mele20
said by Mele20 See Profile :

I don't have it to test but others in GRC newsgroups are reporting that it leaks TPC just like Fx.
Some of us still know from last time how that test turned out: »[OT] FireFox cookie nonsense
--
"If it ain't broke don't fix it."


hpguru
Curb Your Dogma
Premium
join:2002-04-12

reply to Grail Knight
said by Grail Knight See Profile :

One thing about a EULA is that it can be changed so what you do now Marilyn is put your own brand of thoughts into something that is worthy of feedback and tell Google that you will or will not use their browser based on the EULA and then quote the pertinent parts of it that offend you.

Feedback Feedback Feedback Feedback
Or just don't use it and leave them wondering why. They are smart people right? Let them figure it out.
--
God is imaginary.
Top Ten Signs You're a Fundamentalist Christian
»www.talk2action.org/
»www.fstdt.com/


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
You mean they hire smart people but even smart people are known to like feedback. Of course all the feedback in the world is meaningless if they ignore it.
--
"Lego Succurro Lima"

Mele20
Premium
join:2001-06-05
Hilo, HI

reply to SUMware
said by SUMware See Profile :

[Firefox 3 does not leak incoming and outgoing TPC on XP nor Linux on my box as tested numerous times at GRC.
Either you didn't do the test correctly or you failed to do the Cross Context test at all. It the latter test that Fx fails (it passes the main cookie test but only because the Mozilla developers caught wind of Steve's project before Fx3 was released and rushed a fix through for it but they did not fix the cross context vulneralbilities only the glaring major TPC ones. IE (all versions) fail the main test and the Cross Context. The tests have to be done properly and, unfortunately, even for us testers that was not always simple and obvious. The tests are not yet available to the general public.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason

Mele20
Premium
join:2001-06-05
Hilo, HI

reply to Lanik
said by Lanik See Profile :

said by Mele20 See Profile :

I don't have it to test but others in GRC newsgroups are reporting that it leaks TPC just like Fx.
Some of us still know from last time how that test turned out: »[OT] FireFox cookie nonsense
I don't know what you guys ranted on about. It was obvious you can't stand Steve Gibson and you had no idea what you were talking about as far his cookies tests go so I stopped reading that thread as soon as I saw the Gibson haters try to smear him.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason

SUMware
Premium
join:2002-05-21


1 edit
reply to Mele20

Final Results
 

Final Results
 
said by Mele20 See Profile :

said by SUMware See Profile :
Firefox 3 does not leak incoming and outgoing TPC on XP nor Linux on my box as tested numerous times at GRC.
Either you didn't do the test correctly or you failed to do the Cross Context test at all.
The tests were performed correctly with Firefox 3.0.1 (just minutes ago, twice, without Proxo, NoScript, etc.) and included the Cross Context test.
said by Mele20 See Profile :

The tests are not yet available to the general public.
If the GRC tests themselves are not fully available or malfunction, oh well! LOL.

Mele, evidently you are running the world famous FUBAR browser (and, knowing you, also probably misconfigured).

Mele20
Premium
join:2001-06-05
Hilo, HI

reply to SUMware
Re: Chrome BETA Available

I can reproduce the results you got ....anyone can....by cheating. Everyone doing the test correctly sees Fx leaking TPC on the context test. Your cheap attack on my character makes me even more certain that either you don't how to do the tests or you cheated.

If you look at the pages there you'll see they are not finished. That is because Steve Gibson decided to work on the DNS Nameserver Spoofability Test and that is almost finished now so he will be finishing up the cookie forensics tests soon.
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason

SUMware
Premium
join:2002-05-21


2 edits
reply to Mele20
Re: Chrome BETA Available

said by Mele20 See Profile :

I can reproduce the results you got ....anyone can....by cheating. Everyone doing the test correctly sees Fx leaking TPC on the context test. Your cheap attack on my character makes me even more certain that either you don't how to do the tests or you cheated.
So, you accuse me of cheating? You are absolutely hilariously stunning!!!

What can I say except that you clearly have more pressing personal issues than TPC.
-
Forums » Up and Running » Security » SecuritySecurity Software Updates - 04 Sep 2008 »
« Virus - Please Help  


Tuesday, 01-Dec 12:09:38 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [62] Baltimore To Ban Lazy Cable Installs
· [53] Broadband Killed The Game Console
· [38] Rural Carriers Quickly Embracing Fiber
· [37] Rogers Unveils The ISP Dream Model
· [33] AT&T Top Lobbyist Cicconi Has His Feelings Hurt
· [31] Charter Exits Chapter 11
· [24] Midcontinent Socked With Easement Lawsuit
· [12] ACTA: Global Three Strikes
· [12] Vivendi Agrees, Comcast/NBC Deal Soon
· [6] Telco Exec Gets Broadband In Market Snubbed For Years
Most people now reading
· Is Microsoft Technet ok to use for my family PC's? [Microsoft Help]
· [Rant] called out sick! [Rants, Raves, and Praise]
· Windows 7 boot manager editing questions [Microsoft Help]
· Heating - my dad gave me this advice... [Home Repair & Improvement]
· [News] Windows 8 Release 2012? [Microsoft Help]
· IMG 1.7 (IMG Updates and Discussion) [Verizon FIOS TV]
· buying a one way ticket [General Questions]
· Considering Leaving Vonage, who should I Consider? [VOIP Tech Chat]
· Prevx says MS Nov 10 patches causing BSOD problems [Security]
· Connecting to Google Voice Via SIP [VOIP Tech Chat]