[ragequittah]

I'm not so sure this is much worse than Chrome. Really in today's world if you're not browsing the web like multiple people are looking over your shoulder you're probably doing it wrong. And most of the steps people do to mitigate privacy violations (TOR, pihole, VPNs, etc.) probably make any signal you do put out more scrutinized. The one solution I do like is the iCloud private relay which I hope some reputable VPN vendors pick up soon.

[darepublic]

My general understanding is that they browser fingerprint you. And then if that fingerprint is ever detected on a site that also knows your pii they have you. Is that the gist of it or are there more shenanigans I'm unaware of

[nerdponx]

"They" aren't that interested in PII. They're interested in assigning a unique identifier for you and building as detailed of a profile about you as possible, for targeting ads to you, and more recently tailoring prices to maximize value extraction when you buy something. Focusing on the narrow definition of "PII" as it usually is defined in law is a total distraction. Your email address and name are irrelevant for all of that.

[boston_clone]

By default, I believe that anything you put in the "omnibox" is sent to Google - even if you don't press enter. So, if you use it as a clipboard of sorts and paste a secret / token / key, it should be considered compromised.

You can validate this by going to chrome://omnibox

[mvieira38]

> And most of the steps people do to mitigate privacy violations (TOR, pihole, VPNs, etc.) probably make any signal you do put out more scrutinized.

If you're using them correctly there is no way to scrutinize your traffic more, these comments just spread FUD for no good reason. How are "they" unable to catch darkweb criminals for years and even decades, but somehow can tell if it's me browsing reddit over Tor?

[ragequittah]

My take: if you do it correctly you're a very small minority of people and most would probably be concerned at your level of paranoia if you told them every detail of your setup. Turns out opsec is pretty difficult to achieve. Also unless you're a criminal you're probably wasting a lot of time for no real gain.

I use a pihole, ublock, a vpn for some devices, and I'm using my own OPNSense router w/ very strict settings. The amount of privacy I think I have from all that is next to nothing if someone were actually interested in what I was doing. I'd probably just get one of my boxes shelled and that's the end of that. Mostly what I'm trying to do is block 1) Some for the lulz Russian teenager 2) the shady ad networks hoovering up everything all the time and 3) my IoT devices like TVs and Hue light bulbs from ever accessing any part of the rest of my network.

You'll also notice that darkweb criminals are getting caught more and more frequently these days because governments have decided to no longer tolerate it. I feel bad for you if you're in a ransomware gang these days.

[mvieira38]

And if you do follow these arrests you'll notice that it's old-fashioned investigations that catch them, by tracing behavior, log in times, etc. The comment I was answering was implying you lose anonymity by using these tools, which you don't

[alganet]

There are two distinct concerns here.

One of them is personal privacy. For example, an activist being individually targeted.

The other is behavioral targeting, which has no business in catching criminals. It wants to know how large flocks of people behave online.

[throitallaway]

Does Google have my .env files that I've opened via Chrome?

[bdangubic]

it has yours and your next door neighbour's as well

[zghst]

You are so me, exactly.