Slashdot Mirror


Microsoft Claims Google Chrome Steals Your Privacy

An anonymous reader writes "Microsoft is going on the offensive against Google, accusing the search giant of creating a browser that does not respect user privacy. The company posted a video, embedded below, on TechNet Edge with the following description: 'Watch a demo on how Google Chrome collects every keystroke you make and how Internet Explorer 8 keeps your information private through two address bars and In Private browsing.' Microsoft's first criticism is Chrome's combining the address bar and the search box into a single entry box; IE8 keeps those fields separate. 'By keeping these boxes separate, your privacy is better protected and the addresses of the sites you're visiting aren't automatically shared with Microsoft, or anyone else,' says IE product manager Pete LePage."

34 of 522 comments (clear)

  1. Look.... by Darkness404 · · Score: 5, Insightful

    Even if Chrome -was- violating your privacy, why switch to IE? Especially when there is Firefox... Myself I don't like using Chrome because it is not customizable the way Firefox is. You can't even change history settings on Chrome!

    --
    Taxation is legalized theft, no more, no less.
    1. Re:Look.... by amicusNYCL · · Score: 5, Interesting

      I'm not real sure if taking up 900+MB of RAM and 1+GB of VM can really be considered "trivial". I was playing Crysis once and alt-tabbed out of it to figure out why everything was so choppy, and Firefox was using more resources than Crysis.

      --
      "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
    2. Re:Look.... by zegota · · Score: 4, Interesting

      Are you kidding? That first comment surprises me. Speed is the reason I switched to Chrome. It's so much faster than Firefox, it's not even funny. It sounds like the single page you tested your speed premise on had some issues. You might want to expand your sample.

    3. Re:Look.... by icebraining · · Score: 4, Informative

      Bu not Opera Mini, which routes all your traffic through their proxys. http://www.opera.com/mobile/help/faq/#security (third question).

  2. Bogus argument by FranTaylor · · Score: 4, Insightful

    "By keeping these boxes separate, your privacy is better protected"

    Umm, the boxes are all controlled by the same program, so whether or not there is physical separation between them (does that have any meaning in a user interface?) has nothing to do with whether or not the data is collected or not.

    This guy is a product manager?

    1. Re:Bogus argument by nmb3000 · · Score: 5, Informative

      Umm, the boxes are all controlled by the same program, so whether or not there is physical separation between them (does that have any meaning in a user interface?) has nothing to do with whether or not the data is collected or not.

      And you don't understand the problem. This isn't a trust issue with the Chrome application. If it was, you would have lost the battle as soon as you installed it on your computer. This is a privacy problem (a recurring theme with Google's applications).

      The issue that MS is pointing out is that because Chrome combines the address bar and the search box, when you start typing hotmidgetoatmealpor, that information is sent directly to Google so they can do auto-completion/auto-searching. Where it is associated with you. And saved. Forever.

      In IE, the search box is a separate entity, and you can turn search suggestions on or off for each search provider. Because of this, the only information sent to MS (or whatever search provider you use) is what you type in the search box. You can visit whatever URLs you want to and Bing/Yahoo/Google will never know about them.

      Honestly though, I still struggle to figure out what the point of search suggestions are. I suppose they're helpful for people who don't know what they're looking for, but when I go to Google, I already know what I'm going to search for -- that's why I'm there! That said, I suppose it does provide some entertainment.

      --
      "What do you despise? By this are you truly known." --Princess Irulan, Manual of Muad'Dib
      /)
    2. Re:Bogus argument by vux984 · · Score: 4, Interesting

      Hint: Your ISP (or whoever's endpoint your VPN tunnel comes out on) sees all this stuff anyway.

      They have a direct legitimate need to see it. That is precisely the service I am paying them to provide. And while I suppose my ISP *could* be using the information to build a profile on me, where i go, what email i send, who i send it to, etc, etc... I'm actually quite confident they aren't actually doing this. I know people who work for the ISP. I know a great deal about how they are setup. So... yes... they could... but they don't. I could be wrong but then a lot of people I know who should know are ignorant and / or lying. Occam's razor....

      Google on the other hand... is doing this. That's their business model. That's what they do. That's all they do.

      Hint 2: You aren't important enough for anyone to care.

      Really? Trotting that one out?

      Your wrong. Build a profile on the average person... and people will check it out. Someone *always* cares. Friends, class mates, fellow employees, girlfriends, ex-girlfriends, employers, insurance companies...

      Remember the bit of scandal when it came to light that facebook employees could and did (and probably still do) read so-called 'private data'. Build a database of this stuff, and sooner or later it will be abused by someone.

    3. Re:Bogus argument by Anonymous Coward · · Score: 5, Informative

      The issue that MS is pointing out is that because Chrome combines the address bar and the search box, when you start typing hotmidgetoatmealpor, that information is sent directly to Google so they can do auto-completion/auto-searching. Where it is associated with you. And saved. Forever.

      From Google's Privacy Blog (in 2008):

      That's what occurs on the surface of Google Suggest. Here's what happens under the hood. To provide its recommendations Google Suggest needs to know what you've already typed, so these partial queries are sent to Google. For 98% of these requests, we don't log any data at all and simply return the suggestions. For the remaining 2% of cases (which we select randomly), we do log data, like IP addresses, in order to monitor and improve the service.


      However, given the concerns that have been raised about Google storing this information -- and its limited potential use -- we decided that we will anonymize it within about 24 hours (basically, as soon as we practically can) in the 2% of Google Suggest requests we use. This will take a little time to implement, but we expect it to be in place before the end of the month.

  3. Re:Not Correct by parallel_prankster · · Score: 5, Insightful

    Did you not read TFA at all ? You can not only choose which search provider to use the search suggestions, you can also turn off search suggestions in chrome !!

  4. Security is NOT an issue with The Cloud. by Anonymous Coward · · Score: 5, Funny

    Wait a minute. I'm a manager, and I've been reading a lot of case studies and watching a lot of webcasts about The Cloud. Based on all of this glorious marketing literature, I, as a manager, have absolutely no reason to doubt the safety of any data put in The Cloud.

    The case studies all use words like "secure", "MD5", "RSS feeds" and "encryption" to describe the security of The Cloud. I don't know about you, but that sounds damn secure to me! Some Clouds even use SSL and HTTP. That's rock solid in my book.

    And don't forget that you have to use Web Services to access The Cloud. Nothing is more secure than SOA and Web Services, with the exception of perhaps SaaS. But I think that Cloud Services 2.0 will combine the tiers into an MVC-compliant stack that uses SaaS to increase the security and partitioning of the data.

    My main concern isn't with the security of The Cloud, but rather with getting my Indian team to learn all about it so we can deploy some first-generation The Cloud applications and Web Services to provide the ultimate platform upon which we can layer our business intelligence and reporting, because there are still a few verticals that we need to leverage before we can move to The Cloud 2.0.

  5. Let me be the first to say... by kaffiene · · Score: 4, Insightful

    Meh!

    I don't care. I know the deal with Google. Everyone knows the deal with Google - they mine your data so they can target ads, you get useful software.

    I don't mind Google's targeted ads so I feel no need for a tinfoil hat over this one.

    If Google were trying to break into my bank account, I'd be worried, but I don't fear non-obtrusive advertising.

  6. Re:Correct by Jaysyn · · Score: 5, Insightful

    Personally I rather choose a paid solution where I know my privacy wont be lost and I can save documents, emails, etc on my own hard drive instead of relying on cloud computing and all the marketing and privacy intrusion to make it possible.

    You do that. I'll stick with Firefox, thanks.

    --
    There is a war going on for your mind.
  7. Chrome under Linux. by headkase · · Score: 4, Interesting

    I use Chrome under Linux simply because the fonts look beautiful. I also never type stuff into the address bar - that's what all my bookmarks are for. When I actually am looking for something I use, tada, Google anyway. I am fully connected to a whole wack of Google services so I'm sure they know everything I do. So what. Google is benevolent and any information that could actually be used against you will be gathered anyway by someone with the motivation and resources no matter what browser you use. Now if I get a shiver up my spine I go into the tools menu and choose: "Incognito Window" and for every keystroke being entered into the address bar you can turn that off as well by turning off the suggestion service. So, if you don't use it correctly when privacy matters to you then there are privacy concerns. If you change the convenient settings the privacy concerns go away. Harping on Chrome for its suggestion features is a straw-man, if you want to talk real privacy issues then you talk about Cloud services themselves and laws about whether or not warrants are needed for them and also under privacy you talk about how easily compromised the browser is to leak your information. The address bar and suggestion services are just cross-camp sniping: they are easily changed to what you value if you have half a brain cell. Marketing.

    --
    Shh.
  8. Re:Not Correct by ChinggisK · · Score: 5, Insightful

    All of these settings are hidden in the advanced settings dialog

    Bullshit. The search provider option is right on the first options tab. The search suggestions option is at the very top on the last tab (there are only 3 tabs), under the big blue "Privacy" label. Don't damage your own case by exaggerating the facts.

  9. Re:Not Correct by Enderandrew · · Score: 5, Informative

    Chrome actually has a bunch of fine-grain privacy controls they added in the last release.

    http://www.google.com/chrome/intl/en/more/privacy.html

    --
    http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
  10. Re:Not Correct by Anonymous Coward · · Score: 5, Interesting

    As somebody who personally knows people working on Chrome, I can assure you that data mining was not the goal of Chrome. Most engineers at Google are sincerely trying to make the Web a better place. That this actually helps Google is just a bonus for them.

  11. A Koan by arielCo · · Score: 5, Funny

    If a joke is told and no one gets it, does it WHOOSH?

    --
    This post contains no rudeness or derision of any kind. All arguments are friendly. Terms and exclusions may apply.
    1. Re:A Koan by LoverOfJoy · · Score: 4, Funny

      Are you sure it's a joke? I've worked for several managers who sound just like that. And they're 100% serious.

      And would those same managers be posting on slashdot? Even if they were to somehow find their way here, they wouldn't be posting as an anonymous coward. They'd post under a username like PowerBoss2000. At least that's the impression I get from watching The Office. Maybe I should get back to searching for a job.

  12. Re:Not Correct by repka · · Score: 4, Insightful

    What's so hard to understand about this problem? Most users want to use suggestions only for their searches, not URLs they enter. Chrome only allows toggling suggestions for both.

  13. YOU CAN TURN IT OFF. by ivucica · · Score: 4, Informative

    Unless you go to Preferences->Advanced and turn off the appropriate option in the Privacy category.

    Or am I missing something major here? Is it possible that most people on /. didn't see that option? I saw only a comment or two mentioning that.

  14. Re:Not Correct by Kugrian · · Score: 4, Insightful

    All of these settings are hidden in the advanced settings dialog

    They aren't hidden, they're quite visible. 3 clicks show you them.

  15. Spin by vikstar · · Score: 4, Funny

    Earlier that day at Microsoft...
    "Hey Pete, we can't get the combined search and address bar to work properly"
    "Hmm. Ok, don't worry, we'll just spin it as a security feature".

    --
    The question of whether a computer can think is no more interesting than the question of whether a submarine can swim.
  16. Re:Correct by red456 · · Score: 5, Interesting

    do you not think that Firefox is becoming the new IE? If I can remember correctly through my drunken history of the last 8 years, Firefox was first promoted as an alternative the bloated Mozilla - and quite rightly so. Recently though, despite all the releases and the announcements on brand new 10x-faster JavaScript interpreters I find it's bogging down to an almost unusable level.
    Once upon a time there used to be configuration to permit or deny javascript to run - now this is split into 12 different parameters, 7 of which are hidden behind the about:config screen. The default is now for pages to be able to open windows hiding the menu and status bar. WTF?
    Once upon a time there used to an option to open new pages as a tab or in a new window - now this is split into 2 different parameters (browser.link.open_newwindow and browser.link.open_newwindow_restriction) which make no sense to anybody.
    Do you expect 'backspace' to go 'backwards' in your browsing history? Everybody does - on all browsers, except for the Linux release of Firefox - for no understandable reason they decided that the Linux Firefox should do nothing upon pressing backspace, but all other versions should continue the convention.
    Do you actively use the overly complicated features of the re-written Bookmarks functionality on Firefox 3.x? I don't, nobody in my office (20 people) does. Everybody hate it.
    And lastly... privacy. Firefox 3.x made a real big push for 'privacy'. They said 'you can toggle private browsing on and off' - and 'you can delete browsing history over the last hour, day, month etc..". SUPER LIE. Try deleting your history (everything!) then go to your .mozilla/firefox/{UID}.profile directory. Now...try running 'strings' on your places.sqlite file and try running strings on the files in the bookmarkbackups directory. Yeh, privacy, HUH?

  17. Re:Not Correct by bonch · · Score: 4, Insightful

    It's useless. Most Slashdotters have their heads so far up Google's ass, nothing you say will reach their ears. This is a company that indexes everything forever, including your email and IM conversations. It gets praised as some "open source company" when its main product--its search engine and advertising platform--is as closed as Windows. It only uses open source products to get people onto its proprietary advertising platform.

  18. Re:Not Correct by repka · · Score: 4, Insightful

    That's not true, if they wanted to keep it anonymous, they wouldn't send session cookie with each request. Yet they do. Session id is not required for auto-suggestions.

    Once again they don't just receive everything you type in address bar, they also associate it with your session.

  19. Re:Not Correct by DJRumpy · · Score: 5, Insightful

    You mean via the same mechanism where you type information into 'Bing', and then 'Bing' responds with your search results?

    Most people don't type in 100 character URL's (I don't know of any) they either have it bookmarked, or they search for it via, you guess it, the search engine like Google, Bing, or whatnot.

  20. Re:Not Correct by ChinggisK · · Score: 4, Insightful

    That's a fine, legitimate argument. It becomes bullshit when you start suggesting that the options are "hidden in the advanced settings dialog" instead of just right there in the options menu. I'm just protesting the exaggeration.

  21. Re:Not Correct by Jazz-Masta · · Score: 4, Funny

    They (M$) do collect this information locally if you have form auto-completion

    Yes, and my MS Outlook 2007 collects my emails and stores them locally too! Bastards!

  22. Re:Not Correct by Simon80 · · Score: 4, Insightful

    Well, Firefox's default behavior is to serve up your keystrokes to google as well, so I think the main point is that all three browsers' defaults aren't privacy friendly.

  23. Re:Not Correct by shimage · · Score: 4, Insightful

    Assuming you didn't just pull that "90%" figure out of your ass, who cares? They obviously don't, and it's not my privacy they're dicking with. Besides, it's not like Google and every other search engine out there doesn't already store and analyze search queries (indexed by IP address). Is it that big a problem that Google or Bing or whatever knows what you are about to search for before you hit the enter key?

  24. *source code* by GNUALMAFUERTE · · Score: 4, Informative

    What a lame attempt, microsoft ...

    1) - If you use explorer, you are using windows. The chances of someone exploiting your browser and getting access to all your files is 90%
              - You can use Chrome in Mac or GNU/Linux. Both Chrome and your OS keep your data secure

    2) - I have the source code for Chrome (Chromium) and I can study it, make sure it's safe, or change whatever I want. Also, I know the community has reviewed it, and the company is not trying to hid anything behind a binary
              - I don't have the source of explorer, and microsoft has a huge history of phoning home and spying on users

    3 - Chrome is standards compliant, so there's no vendor tie-in. If I find something I don't like, I can move on to another browser
              - Explorer is platform specific, and non compliant with standards. That means, if I develop anything for it, it'll probably be incompatible with other browsers and moving away will be hard.

    Sorry microsoft, Google published the source code for their browser, it's well developed, multi-platform, they'll take my patches and if they are good implement them on their source, and they are open and transparent about everything the browser does. They are doing all the right things, and I just love this browser.

    --
    WTF am I doing replying to an AC at 5 A.M on a Friday night?
  25. Re:Not Correct by SanityInAnarchy · · Score: 4, Interesting

    The fact is, Chrome is the most privacy intrusive browser

    Firefox's Awesome Bar does the exact same thing, by default. IE's anti-phishing sends every URL you visit to Microsoft.

    --
    Don't thank God, thank a doctor!
  26. Re:Not Correct by BobPaul · · Score: 4, Insightful

    What's so hard to understand about this problem? Most users want to use suggestions only for their searches, not URLs they enter.

    Bullshit. Most users only use the search bars on Firefox and IE, anyway. And they frequently type URLs into them. If I had a nickel for every time I saw someone type "google" into the search bar, click the first result from MSN and then type a search...

    Usage studies is how Google came to their cleaner interface. Your concerns about privacy are valid, and I wouldn't doubt that factored into their design decisions, but I wouldn't be surprised if the other browsers combined their bars eventually, too. We're already moving that way with FX's awesome-bar.

  27. Re:Not Correct by Torodung · · Score: 5, Insightful

    Um, Firefox's address bar searches your local bookmarks and history. The "suggestions" are from your own locally stored browsing habits, which you can burn to the ground with every exit if you like.

    --
    Toro