• @[email protected]
    link
    fedilink
    English
    333 days ago

    Very good point in this article that third-party cookies can be deleted but fingerprinting - like fingerprints themselves - cannot be. And quoting Google in 2019 before they decided to be even more evil than they are now.

    This might be the best article I’ve seen about the change, and it’s posted on a company blog.

    • Onno (VK6FLAB)
      link
      fedilink
      English
      20
      edit-2
      3 days ago

      The article appears to be high on repetition and low on detail. I saw very little evidence supporting the claims and even less external resources.

      What I did see was lots of links to their products.

      I’m not saying that the article is wrong, just that it’s not great.

      This BBC article cites several organisations and explains how it’s done for example:

      Edit: Added link

      • @[email protected]
        link
        fedilink
        English
        73 days ago

        Touche. I didn’t realize how many of the links in Tuta’s blog post were to their own blog.

  • atro_city
    link
    fedilink
    203 days ago

    Digital fingerprinting collects and analyzes multiple data points from a user’s device - such as screen resolution, installed fonts, browser settings, and even battery status - to create a unique profile

    Why is all this information available in the first place? Why the hell does a website need to know which fonts are installed, which browser settings are active, and why the hell would it require the battery status? Why are browsers sharing that much information in the first place?

    • @grue
      link
      English
      25
      edit-2
      3 days ago

      Because Javascript was a cancerous mistake. Web browsers should never have been scope-creeped to allow executable “apps” instead of “pages” of document markup.

      • atro_city
        link
        fedilink
        22 days ago

        I am curious, what do you think would’ve been the better solution?

        • Kernal64
          link
          fedilink
          English
          32 days ago

          There was no problem requiring a solution. Just like cars functioned perfectly fine as cars for decades before becoming gross, always online, data harvesting privacy invasion devices, the “solution” would have been to just not do that. Cars used to let you drive places just fine before jamming internet connections in them. Similarly, browsers used to let you browse the web just fine before we decided to abandon stand alone software development to jam everything in a browser.

          • atro_city
            link
            fedilink
            -22 days ago

            I’m not sure what the solution is that you’re proposing. Web documents with links to download software instead of web apps? Am I understanding that right?

            • Kernal64
              link
              fedilink
              English
              22 days ago

              Web apps don’t need to exist, so yeah. A website should just be a website. If there’s something that NEEDS a whole ass application to run, that should be something you have the choice to download and install, not implemented in an invasive way in unrelated software meant to show some interactive text, images, and video.

              • atro_city
                link
                fedilink
                -32 days ago

                You’re shouting at clouds old man. I thought you were going to propose an actual solution, not just weather against the times.

                • Kernal64
                  link
                  fedilink
                  English
                  3
                  edit-2
                  2 days ago

                  🙄

                  Your post asking for a solution was in the past tense. I answered in that context. Anyone following the discussion is able to see that. If you changed your frame of reference in your mind to the present day, you sure didn’t communicate that here, so that’s on you. How would we solve this problem today? I don’t think we can. Javascript and the like are way too entrenched and web apps are a way of life now. We’re stuck with this privacy invading nonsense until something drastic changes, but I don’t know that that change would look like.

    • @[email protected]OP
      link
      fedilink
      English
      33 days ago

      I suppose it queries for the fonts in any given website’s stylesheet font stack but I would not know better.

  • moosetwin
    link
    fedilink
    English
    123 days ago

    saw tutanota in the title and was worried I’d have to switch email providers again

          • @[email protected]
            link
            fedilink
            English
            12 days ago

            Because with proton you can send encrypted email to people off proton with PGP. Tutanota only sends encrypted mail to other people on tutanota.

            posteo.de is a better replacement for proton. They support PGP

            • @[email protected]
              link
              fedilink
              English
              3
              edit-2
              2 days ago

              I’m personally more worried about what a company is doing with my data. I.e. Google reading your emails for “personalized ads” or just straight up selling my data.

              I feel confident that Tuta is not selling my data, and that’s what’s important to me.

              On top of this, I also use my own domain, posteo does not support custom domains.

              • @[email protected]
                link
                fedilink
                English
                1
                edit-2
                2 days ago

                But every time you email someone else on gmail, google reads your data. Including all the companies using Google Workspace.

                But if you send PGP encrypted to a gmail user with a service that supports it (tutanota does not), then the recipients email provider can’t read it

  • Chozo
    link
    fedilink
    03 days ago

    I’m gonna be honest, I’m skeptical of the claims this article makes. Tuta has a history of using fake emails and “updates” from competitors in order to sell their product. Last year, they spread a screenshot on their Mastodon account of a fake email allegedly from Google, announcing that Gmail was shutting down. They were told in the post that their claim was inaccurate and that the “email” they were sharing was fake, but they left their post up anyway.

    It wasn’t until they were told that they could be sued for false advertisement that they removed the post. Their response was effectively “Oops, we forgot to fact-check it before going to bed”, which I’m not sure I believe, because how do you write an entire post based on a screenshot, with the intention to sell your product, and not think even for half a second “Hmm maybe I should confirm some of these wild claims I’m about to make”? It’s either malice or incompetence, neither of which instill trust.

    I’m not saying this to defend Google, just to highlight that Tuta doesn’t take issue with lying to potential customers, and that’s something you should know before you give them your money. If they’re willing to spread such a stupid and easily-disproven lie before you’re even a customer, what are they willing to lie about once you give them your credit card?