Slashdot Mirror


Microsoft Claims Google Chrome Steals Your Privacy

An anonymous reader writes "Microsoft is going on the offensive against Google, accusing the search giant of creating a browser that does not respect user privacy. The company posted a video, embedded below, on TechNet Edge with the following description: 'Watch a demo on how Google Chrome collects every keystroke you make and how Internet Explorer 8 keeps your information private through two address bars and In Private browsing.' Microsoft's first criticism is Chrome's combining the address bar and the search box into a single entry box; IE8 keeps those fields separate. 'By keeping these boxes separate, your privacy is better protected and the addresses of the sites you're visiting aren't automatically shared with Microsoft, or anyone else,' says IE product manager Pete LePage."

49 of 522 comments (clear)

  1. Correct by sopssa · · Score: 3, Insightful

    Pete LePage is spot on with this. The privacy intrusion by Chrome is outstanding. Every key you type to the address bar is sent to Google. Your Chrome installation has an personal UI number to track where you downloaded Chrome from, wherever you use it and how you use it.

    I am still surprised how many people (even here on our geeky slashdot group who should know better) choose something based on it being offered for free, no matter what happens to their privacy. The same people who complain about casual people using Facebook and how much information they're putting there, and not realizing how much privacy they are losing by using Google's free products and search engine.

    It's a known fact that every software needs to be funded in some way. Personally I rather choose a paid solution where I know my privacy wont be lost and I can save documents, emails, etc on my own hard drive instead of relying on cloud computing and all the marketing and privacy intrusion to make it possible. After all Google is a marketing company while Microsoft is an software company. The fact they're doing business by selling me a product instead of whoring to advertisers kind of shows that.

    1. Re:Correct by Jaysyn · · Score: 5, Insightful

      Personally I rather choose a paid solution where I know my privacy wont be lost and I can save documents, emails, etc on my own hard drive instead of relying on cloud computing and all the marketing and privacy intrusion to make it possible.

      You do that. I'll stick with Firefox, thanks.

      --
      There is a war going on for your mind.
    2. Re:Correct by Anonymous Coward · · Score: 3, Insightful

      I hope so, they might be able to start recommending some better, hotter, stuff for my pleasuring!

    3. Re:Correct by sopssa · · Score: 3, Informative

      I'm assuming you didn't actually read the article because you wanted to look like a jackass.

      And what did you wanted me to read about it? This?

      We downloaded Fiddler to make some comparisons of our own. As we suspected, Chrome can be set to send information on every keystroke to Bing (or any other search engine that supports Search Suggestions) instead of Google. The same behavior occurs in IE8, but only in the search bar. LePage is only correct in his assertion that IE8 does not send information to anyone when the user types into the address bar.

      The last sentence is a major point.

    4. Re:Correct by sopssa · · Score: 3, Insightful

      Actually you are spot on, but for other reasons.

      With Facebook you choose what information you put or post there.

      With Google you do not - they have what you have typed to address bar, what you have searched for, what your emails contain, what sites you visit, how you're there, what you do (analytics) and so on..

      Actually both Google and Microsoft are worried about this - see my subscription here for a request to change relating laws.

    5. Re:Correct by red456 · · Score: 5, Interesting

      do you not think that Firefox is becoming the new IE? If I can remember correctly through my drunken history of the last 8 years, Firefox was first promoted as an alternative the bloated Mozilla - and quite rightly so. Recently though, despite all the releases and the announcements on brand new 10x-faster JavaScript interpreters I find it's bogging down to an almost unusable level.
      Once upon a time there used to be configuration to permit or deny javascript to run - now this is split into 12 different parameters, 7 of which are hidden behind the about:config screen. The default is now for pages to be able to open windows hiding the menu and status bar. WTF?
      Once upon a time there used to an option to open new pages as a tab or in a new window - now this is split into 2 different parameters (browser.link.open_newwindow and browser.link.open_newwindow_restriction) which make no sense to anybody.
      Do you expect 'backspace' to go 'backwards' in your browsing history? Everybody does - on all browsers, except for the Linux release of Firefox - for no understandable reason they decided that the Linux Firefox should do nothing upon pressing backspace, but all other versions should continue the convention.
      Do you actively use the overly complicated features of the re-written Bookmarks functionality on Firefox 3.x? I don't, nobody in my office (20 people) does. Everybody hate it.
      And lastly... privacy. Firefox 3.x made a real big push for 'privacy'. They said 'you can toggle private browsing on and off' - and 'you can delete browsing history over the last hour, day, month etc..". SUPER LIE. Try deleting your history (everything!) then go to your .mozilla/firefox/{UID}.profile directory. Now...try running 'strings' on your places.sqlite file and try running strings on the files in the bookmarkbackups directory. Yeh, privacy, HUH?

    6. Re:Correct by Trinn · · Score: 3, Insightful

      I've accidentally gone back while filling out a major form (that won't remember its state on a click of forward) enough times to want to simply remove the backspace key from my keyboard. I am happy to hear someone's getting rid of this asinine default. cmd/alt-left/right are fine. backspace has a specific meaning that has nothing to do with history navigation.

  2. Look.... by Darkness404 · · Score: 5, Insightful

    Even if Chrome -was- violating your privacy, why switch to IE? Especially when there is Firefox... Myself I don't like using Chrome because it is not customizable the way Firefox is. You can't even change history settings on Chrome!

    --
    Taxation is legalized theft, no more, no less.
    1. Re:Look.... by amicusNYCL · · Score: 5, Interesting

      I'm not real sure if taking up 900+MB of RAM and 1+GB of VM can really be considered "trivial". I was playing Crysis once and alt-tabbed out of it to figure out why everything was so choppy, and Firefox was using more resources than Crysis.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    2. Re:Look.... by zegota · · Score: 4, Interesting

      Are you kidding? That first comment surprises me. Speed is the reason I switched to Chrome. It's so much faster than Firefox, it's not even funny. It sounds like the single page you tested your speed premise on had some issues. You might want to expand your sample.

    3. Re:Look.... by icebraining · · Score: 4, Informative

      Bu not Opera Mini, which routes all your traffic through their proxys. http://www.opera.com/mobile/help/faq/#security (third question).

    4. Re:Look.... by amicusNYCL · · Score: 3, Informative

      No, actually I didn't look closer, because it doesn't really matter specifically which part of the application or which plugin is causing the problems, does it? The end result is the same. If Flash was such a problem then I would expect the same memory usage in every browser using Flash. In fact, considering the fact that other browsers use the exact same plugin which Firefox does for Flash, but don't exhibit the same problems, doesn't that sort of rule out Flash alone as the culprit? Wouldn't it be more likely that the problem is a combination between Firefox and something else? The common denominator is Firefox, not Flash.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  3. Bogus argument by FranTaylor · · Score: 4, Insightful

    "By keeping these boxes separate, your privacy is better protected"

    Umm, the boxes are all controlled by the same program, so whether or not there is physical separation between them (does that have any meaning in a user interface?) has nothing to do with whether or not the data is collected or not.

    This guy is a product manager?

    1. Re:Bogus argument by nmb3000 · · Score: 5, Informative

      Umm, the boxes are all controlled by the same program, so whether or not there is physical separation between them (does that have any meaning in a user interface?) has nothing to do with whether or not the data is collected or not.

      And you don't understand the problem. This isn't a trust issue with the Chrome application. If it was, you would have lost the battle as soon as you installed it on your computer. This is a privacy problem (a recurring theme with Google's applications).

      The issue that MS is pointing out is that because Chrome combines the address bar and the search box, when you start typing hotmidgetoatmealpor, that information is sent directly to Google so they can do auto-completion/auto-searching. Where it is associated with you. And saved. Forever.

      In IE, the search box is a separate entity, and you can turn search suggestions on or off for each search provider. Because of this, the only information sent to MS (or whatever search provider you use) is what you type in the search box. You can visit whatever URLs you want to and Bing/Yahoo/Google will never know about them.

      Honestly though, I still struggle to figure out what the point of search suggestions are. I suppose they're helpful for people who don't know what they're looking for, but when I go to Google, I already know what I'm going to search for -- that's why I'm there! That said, I suppose it does provide some entertainment.

      --
      "What do you despise? By this are you truly known." --Princess Irulan, Manual of Muad'Dib
      /)
    2. Re:Bogus argument by vux984 · · Score: 4, Interesting

      Hint: Your ISP (or whoever's endpoint your VPN tunnel comes out on) sees all this stuff anyway.

      They have a direct legitimate need to see it. That is precisely the service I am paying them to provide. And while I suppose my ISP *could* be using the information to build a profile on me, where i go, what email i send, who i send it to, etc, etc... I'm actually quite confident they aren't actually doing this. I know people who work for the ISP. I know a great deal about how they are setup. So... yes... they could... but they don't. I could be wrong but then a lot of people I know who should know are ignorant and / or lying. Occam's razor....

      Google on the other hand... is doing this. That's their business model. That's what they do. That's all they do.

      Hint 2: You aren't important enough for anyone to care.

      Really? Trotting that one out?

      Your wrong. Build a profile on the average person... and people will check it out. Someone *always* cares. Friends, class mates, fellow employees, girlfriends, ex-girlfriends, employers, insurance companies...

      Remember the bit of scandal when it came to light that facebook employees could and did (and probably still do) read so-called 'private data'. Build a database of this stuff, and sooner or later it will be abused by someone.

    3. Re:Bogus argument by Anonymous Coward · · Score: 5, Informative

      The issue that MS is pointing out is that because Chrome combines the address bar and the search box, when you start typing hotmidgetoatmealpor, that information is sent directly to Google so they can do auto-completion/auto-searching. Where it is associated with you. And saved. Forever.

      From Google's Privacy Blog (in 2008):

      That's what occurs on the surface of Google Suggest. Here's what happens under the hood. To provide its recommendations Google Suggest needs to know what you've already typed, so these partial queries are sent to Google. For 98% of these requests, we don't log any data at all and simply return the suggestions. For the remaining 2% of cases (which we select randomly), we do log data, like IP addresses, in order to monitor and improve the service.


      However, given the concerns that have been raised about Google storing this information -- and its limited potential use -- we decided that we will anonymize it within about 24 hours (basically, as soon as we practically can) in the 2% of Google Suggest requests we use. This will take a little time to implement, but we expect it to be in place before the end of the month.

  4. Re:Not Correct by parallel_prankster · · Score: 5, Insightful

    Did you not read TFA at all ? You can not only choose which search provider to use the search suggestions, you can also turn off search suggestions in chrome !!

  5. Security is NOT an issue with The Cloud. by Anonymous Coward · · Score: 5, Funny

    Wait a minute. I'm a manager, and I've been reading a lot of case studies and watching a lot of webcasts about The Cloud. Based on all of this glorious marketing literature, I, as a manager, have absolutely no reason to doubt the safety of any data put in The Cloud.

    The case studies all use words like "secure", "MD5", "RSS feeds" and "encryption" to describe the security of The Cloud. I don't know about you, but that sounds damn secure to me! Some Clouds even use SSL and HTTP. That's rock solid in my book.

    And don't forget that you have to use Web Services to access The Cloud. Nothing is more secure than SOA and Web Services, with the exception of perhaps SaaS. But I think that Cloud Services 2.0 will combine the tiers into an MVC-compliant stack that uses SaaS to increase the security and partitioning of the data.

    My main concern isn't with the security of The Cloud, but rather with getting my Indian team to learn all about it so we can deploy some first-generation The Cloud applications and Web Services to provide the ultimate platform upon which we can layer our business intelligence and reporting, because there are still a few verticals that we need to leverage before we can move to The Cloud 2.0.

  6. Let me be the first to say... by kaffiene · · Score: 4, Insightful

    Meh!

    I don't care. I know the deal with Google. Everyone knows the deal with Google - they mine your data so they can target ads, you get useful software.

    I don't mind Google's targeted ads so I feel no need for a tinfoil hat over this one.

    If Google were trying to break into my bank account, I'd be worried, but I don't fear non-obtrusive advertising.

  7. Microsoft privacy policy by Anonymous Coward · · Score: 3, Informative

    Has anyone ever tried to implment the Microsoft privacy policy? Here is one guy who did.

  8. Chrome under Linux. by headkase · · Score: 4, Interesting

    I use Chrome under Linux simply because the fonts look beautiful. I also never type stuff into the address bar - that's what all my bookmarks are for. When I actually am looking for something I use, tada, Google anyway. I am fully connected to a whole wack of Google services so I'm sure they know everything I do. So what. Google is benevolent and any information that could actually be used against you will be gathered anyway by someone with the motivation and resources no matter what browser you use. Now if I get a shiver up my spine I go into the tools menu and choose: "Incognito Window" and for every keystroke being entered into the address bar you can turn that off as well by turning off the suggestion service. So, if you don't use it correctly when privacy matters to you then there are privacy concerns. If you change the convenient settings the privacy concerns go away. Harping on Chrome for its suggestion features is a straw-man, if you want to talk real privacy issues then you talk about Cloud services themselves and laws about whether or not warrants are needed for them and also under privacy you talk about how easily compromised the browser is to leak your information. The address bar and suggestion services are just cross-camp sniping: they are easily changed to what you value if you have half a brain cell. Marketing.

    --
    Shh.
  9. Re:Not Correct by ChinggisK · · Score: 5, Insightful

    All of these settings are hidden in the advanced settings dialog

    Bullshit. The search provider option is right on the first options tab. The search suggestions option is at the very top on the last tab (there are only 3 tabs), under the big blue "Privacy" label. Don't damage your own case by exaggerating the facts.

  10. Re:Not Correct by Enderandrew · · Score: 5, Informative

    Chrome actually has a bunch of fine-grain privacy controls they added in the last release.

    http://www.google.com/chrome/intl/en/more/privacy.html

    --
    http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
  11. Re:Not Correct by Anonymous Coward · · Score: 5, Interesting

    As somebody who personally knows people working on Chrome, I can assure you that data mining was not the goal of Chrome. Most engineers at Google are sincerely trying to make the Web a better place. That this actually helps Google is just a bonus for them.

  12. A Koan by arielCo · · Score: 5, Funny

    If a joke is told and no one gets it, does it WHOOSH?

    --
    This post contains no rudeness or derision of any kind. All arguments are friendly. Terms and exclusions may apply.
    1. Re:A Koan by LoverOfJoy · · Score: 4, Funny

      Are you sure it's a joke? I've worked for several managers who sound just like that. And they're 100% serious.

      And would those same managers be posting on slashdot? Even if they were to somehow find their way here, they wouldn't be posting as an anonymous coward. They'd post under a username like PowerBoss2000. At least that's the impression I get from watching The Office. Maybe I should get back to searching for a job.

  13. Re:this is news? by kronosopher · · Score: 3, Informative

    Google Wave uses AJAX to show other users in your wave what you're typing as you type it. This does not mean "they want to know everything you type". It's a feature, and a tool. Like any tool it can be used for both benevolent and malevolent purposes, but itself is not inherently either.

  14. Re:Not Correct by Runaway1956 · · Score: 3, Insightful

    I've read the title of the summary, and dismissed it as an especially smelly load of swine shit. Every browser has it's own issues, and the user should be familiar with them. Yeah, all the browsers tend to keep records that are unnecessary. All the browsers tend to report data that is unnecessary, to websites, to developers, to the authors, if left on default settings.

    But, for MICROSOFT to point fingers is just preposterous.

    Maybe they can try again in 10 years, after they've created a clearly superior browser. I mean, CLEARLY superior to anything else on the market. When those of us who really dislike and/or hate microsoft HAVE to admit that their browser is at least as good as any of the competition, THEN MS can find fault with the competition.

    Wait - did I say "10 years"? Hmmmmmm. More than likely, browsers will be obsolete before Microsoft makes the browser that is clearly superior to any competition that can be found.

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  15. Re:Not Correct by repka · · Score: 4, Insightful

    What's so hard to understand about this problem? Most users want to use suggestions only for their searches, not URLs they enter. Chrome only allows toggling suggestions for both.

  16. Re:Not Correct by DJRumpy · · Score: 3, Insightful

    To add to that, what is to stop a software vendor (MS) from simply gathering the information typed into ANY field in a browser. Whether they are in a combo field or not is irrelevant. What a ridiculous argument.

  17. YOU CAN TURN IT OFF. by ivucica · · Score: 4, Informative

    Unless you go to Preferences->Advanced and turn off the appropriate option in the Privacy category.

    Or am I missing something major here? Is it possible that most people on /. didn't see that option? I saw only a comment or two mentioning that.

  18. Re:Not Correct by Kugrian · · Score: 4, Insightful

    All of these settings are hidden in the advanced settings dialog

    They aren't hidden, they're quite visible. 3 clicks show you them.

  19. Spin by vikstar · · Score: 4, Funny

    Earlier that day at Microsoft...
    "Hey Pete, we can't get the combined search and address bar to work properly"
    "Hmm. Ok, don't worry, we'll just spin it as a security feature".

    --
    The question of whether a computer can think is no more interesting than the question of whether a submarine can swim.
  20. Re:Not Correct by bonch · · Score: 4, Insightful

    It's useless. Most Slashdotters have their heads so far up Google's ass, nothing you say will reach their ears. This is a company that indexes everything forever, including your email and IM conversations. It gets praised as some "open source company" when its main product--its search engine and advertising platform--is as closed as Windows. It only uses open source products to get people onto its proprietary advertising platform.

  21. Re:Not Correct by repka · · Score: 4, Insightful

    That's not true, if they wanted to keep it anonymous, they wouldn't send session cookie with each request. Yet they do. Session id is not required for auto-suggestions.

    Once again they don't just receive everything you type in address bar, they also associate it with your session.

  22. Re:Not Correct by DJRumpy · · Score: 5, Insightful

    You mean via the same mechanism where you type information into 'Bing', and then 'Bing' responds with your search results?

    Most people don't type in 100 character URL's (I don't know of any) they either have it bookmarked, or they search for it via, you guess it, the search engine like Google, Bing, or whatnot.

  23. Re:Not Correct by ChinggisK · · Score: 4, Insightful

    That's a fine, legitimate argument. It becomes bullshit when you start suggesting that the options are "hidden in the advanced settings dialog" instead of just right there in the options menu. I'm just protesting the exaggeration.

  24. Re:Not Correct by Jazz-Masta · · Score: 4, Funny

    They (M$) do collect this information locally if you have form auto-completion

    Yes, and my MS Outlook 2007 collects my emails and stores them locally too! Bastards!

  25. Re:Not Correct by Simon80 · · Score: 4, Insightful

    Well, Firefox's default behavior is to serve up your keystrokes to google as well, so I think the main point is that all three browsers' defaults aren't privacy friendly.

  26. Re:Obnoxious Motherfuckers by Rantastic · · Score: 3, Insightful

    What this really means is that Microsoft is scared shitless. Anyone who really cares about security and privacy left Windows and Microsoft behind a long time ago.

    --
    Ask Slashdot: Where bad ideas meet poor googling skills.
  27. Re:Not Correct by shimage · · Score: 4, Insightful

    Assuming you didn't just pull that "90%" figure out of your ass, who cares? They obviously don't, and it's not my privacy they're dicking with. Besides, it's not like Google and every other search engine out there doesn't already store and analyze search queries (indexed by IP address). Is it that big a problem that Google or Bing or whatever knows what you are about to search for before you hit the enter key?

  28. *source code* by GNUALMAFUERTE · · Score: 4, Informative

    What a lame attempt, microsoft ...

    1) - If you use explorer, you are using windows. The chances of someone exploiting your browser and getting access to all your files is 90%
              - You can use Chrome in Mac or GNU/Linux. Both Chrome and your OS keep your data secure

    2) - I have the source code for Chrome (Chromium) and I can study it, make sure it's safe, or change whatever I want. Also, I know the community has reviewed it, and the company is not trying to hid anything behind a binary
              - I don't have the source of explorer, and microsoft has a huge history of phoning home and spying on users

    3 - Chrome is standards compliant, so there's no vendor tie-in. If I find something I don't like, I can move on to another browser
              - Explorer is platform specific, and non compliant with standards. That means, if I develop anything for it, it'll probably be incompatible with other browsers and moving away will be hard.

    Sorry microsoft, Google published the source code for their browser, it's well developed, multi-platform, they'll take my patches and if they are good implement them on their source, and they are open and transparent about everything the browser does. They are doing all the right things, and I just love this browser.

    --
    WTF am I doing replying to an AC at 5 A.M on a Friday night?
    1. Re:*source code* by EnglishTim · · Score: 3, Informative

      Did you even read the article? Did you even read the summary?

      Yes, you may be able to get the source of Chrome, but you don't have the source of the search provider that it connects to. Microsoft's point is that if you're using Chrome, any URL you type in is sent to Google (by default, anyway) and you don't know what happens to information when it gets there.

  29. Re:Not Correct by supremebob · · Score: 3, Insightful

    That said, most of that 90% of users who wouldn't bother changing the default options in Chrome probably wouldn't have Chrome to begin with. Most of those users would be using whatever browser came pre-installed on the PC that they ordered from Dell or picked up at Sam's Club, and many of them probably haven't even heard of Chrome yet.

    My point is that Chrome already has a pretty advanced user base (advanced enough to know how to download and install a web browser, anyway), and they would know how to edit privacy options if they wanted to do so.

  30. Re:Not Correct by SanityInAnarchy · · Score: 4, Interesting

    The fact is, Chrome is the most privacy intrusive browser

    Firefox's Awesome Bar does the exact same thing, by default. IE's anti-phishing sends every URL you visit to Microsoft.

    --
    Don't thank God, thank a doctor!
  31. Re:Not Correct by BobPaul · · Score: 4, Insightful

    What's so hard to understand about this problem? Most users want to use suggestions only for their searches, not URLs they enter.

    Bullshit. Most users only use the search bars on Firefox and IE, anyway. And they frequently type URLs into them. If I had a nickel for every time I saw someone type "google" into the search bar, click the first result from MSN and then type a search...

    Usage studies is how Google came to their cleaner interface. Your concerns about privacy are valid, and I wouldn't doubt that factored into their design decisions, but I wouldn't be surprised if the other browsers combined their bars eventually, too. We're already moving that way with FX's awesome-bar.

  32. Re:So then what do you recommend? by Spewns · · Score: 3, Informative

    So then what is a good browser? I do value privacy so I don't use Chrome (I figure google can have either my search history or web browsing history but not both, and adblock for Chrome really sucks). I hate ads so I don't use Opera (the adblock solution also sucks). I don't care about bloat, but I do care about speed, and firefox is the slowest of the main browsers I use (I do not use IE8). The four things I care about are security, ad-blocking, speed, and privacy. It looks like this is another case of "choose 3 out of 4".

    1. Take off the tin foil hat and spend 5 seconds disabling whatever it is that offends you in the clearly labeled and displayed Privacy settings in Chrome.
    2. Download a good hosts adblocking file.
    3. Download a good extension that'll hide the blocked elements and text ads.
    4. Enjoy using a blazingly fast and responsive, free browser.

    Or if you're still paranoid that Google is using Chrome to hijack your life, you could even do this:
    1. Download Opera.
    2. Use this guy's stuff.

  33. Re:Not Correct by Torodung · · Score: 5, Insightful

    Um, Firefox's address bar searches your local bookmarks and history. The "suggestions" are from your own locally stored browsing habits, which you can burn to the ground with every exit if you like.

    --
    Toro

  34. Re:Not Correct by Benaiah · · Score: 3, Insightful

    And 90% of all statistics are made up on the spot!