Hacker News new | ask | show | jobs
by vablings 220 days ago
I think this is a nihilistic view. The browser ultimately sends only what the webpage requests. If we gut the ability for websites to request large swathes of information such as every supported TLS Cipher suite and also better protections such as GDPR to make it illegal for browsers to track this information unless a user signs up and also not gating information behind said sign-ups
3 comments

I couldn't quite catch what you meant, but

> The browser ultimately sends only what the webpage requests.

You should do research before making such claims.

> and also not gating information behind said sign-ups

"People should do work for free" isn't very workable.

I don't think there's anything in GDPR or similar laws about disallowing paying for a subscription with money. It's merely about killing the practice of paying with your privacy for something otherwise labeled as "free".
The quote I gave was the context, not GDPR.
"not gating information behind said sign-ups" was in the context of regulations like GDPR. You twisted that into "People should do work for free" which is not at all the meaning of what you replied to.
GDPR is nothing to do with stopping locking info behind a signup. Not at all.

People lock info behind a signup if they want to to monetise. Something stopping that is forcing advertising as the monetisation strategy, or else saying people should work for free.

Specifically, my concept is not having to fork over personal information to get access to "free content" I could have worded that better, its either free or you pay and if you pay with your information each sale of your information should be recorded and legible
>The browser ultimately sends only what the webpage requests.

You've got 6 layers under your browser before that data is sent -- some of those are useful for fingerprinting. Also, browser behavior and feature sets are not and likely will never be 100% uniform.

> GDPR to make it illegal for browsers to track this information

Unfortunately the internet is global and people outside of the reach of those jurisdictions can just exist outside of the reach of those laws. Consider the existing landscape of malicious internet traffic and scams which are already illegal in almost every country -- they are still a widespread problem.

Browser behavior and feature sets are mostly uniform apart from some specific semantics. Companies like Google should absolutely be anti-trusted out of owning the Chrome Browser and it should be required that because you are "selling a browser" you must inform each user of the transaction of data

When I say selling, I mean that in the truest form. Google chrome isn't free; you just pay with your data rather than your wallet. You as a consumer should retain the full ownership and access/control of your data and that should be legible in a way you can inspect exactly what's going on. I think it would really wake up a lot of privacy folk to what actually goes on with people's data and things like facebooks Onavo VPN is more visible