3 ms·

Wait, what prevents the next court to say that the browser vendor is responsible for the leak ? Per default the browser is not asking the user if it's okay to d

Wait, what prevents the next court to say that the browser vendor is responsible for the leak ? Per default the browser is not asking the user if it's okay to download fonts from Google (or any resources from any another resources provider) after all.

posterboy 5y ago
The browser can be set to dissallow third party resources
- johnchristopher 5y ago
  Keyword: per default. It's an opt-out, GDPR requires an opt-in.
  - isbvhodnvemrwvn 5y ago
    People who created the browser are not processing any data when you use the browser, so GDPR hardly applies. They need to be careful with bug reports, but that's it.
    - johnchristopher 5y ago
      Of course, I am following the logic where it goes. Now, why would website operators be considered data processors for providing a link to google fonts to website users ? The website is not leaking the IP, it doesn't need if to display fonts and it doesn't use visitor's IP to display fonts. Ultimately the user of the browser is using his IP to get the fonts and this user is the one responsible for leaking his IP. The website has delivered an HTML document. It's up to the user to do what he wants with it and follow links or not.
foxfluff 5y ago
Why is it not the author of your NIC driver who is responsible for the leak? Per default the driver isn't asking whether to send a packet to Google's IP address. Here's why: the driver is just doing what it's told to do. The responsible falls on the party who does the telling. If a website tells my browser to load resources from Google, it's not on my cpu or my nic or its driver or kernel or firewall or the browser.
- johnchristopher 5y ago
  Thank you for your comment but this point has already been invalidated. See https://news.ycombinator.com/threads?id=johnchristopher#30136030 https://news.ycombinator.com/threads?id=johnchristopher#3013... and replace "browser" with "NIC". No need to backtrack. > The website has delivered an HTML document. It's up to the user to do what he wants with it and follow links or not.

posterboy 5y ago

The browser can be set to dissallow third party resources

johnchristopher 5y ago
Keyword: per default. It's an opt-out, GDPR requires an opt-in.
- isbvhodnvemrwvn 5y ago
  People who created the browser are not processing any data when you use the browser, so GDPR hardly applies. They need to be careful with bug reports, but that's it.
  - johnchristopher 5y ago
    Of course, I am following the logic where it goes. Now, why would website operators be considered data processors for providing a link to google fonts to website users ? The website is not leaking the IP, it doesn't need if to display fonts and it doesn't use visitor's IP to display fonts. Ultimately the user of the browser is using his IP to get the fonts and this user is the one responsible for leaking his IP. The website has delivered an HTML document. It's up to the user to do what he wants with it and follow links or not.

foxfluff 5y ago

Why is it not the author of your NIC driver who is responsible for the leak? Per default the driver isn't asking whether to send a packet to Google's IP address. Here's why: the driver is just doing what it's told to do. The responsible falls on the party who does the telling. If a website tells my browser to load resources from Google, it's not on my cpu or my nic or its driver or kernel or firewall or the browser.

johnchristopher 5y ago
Thank you for your comment but this point has already been invalidated. See https://news.ycombinator.com/threads?id=johnchristopher#30136030 https://news.ycombinator.com/threads?id=johnchristopher#3013... and replace "browser" with "NIC". No need to backtrack. > The website has delivered an HTML document. It's up to the user to do what he wants with it and follow links or not.