5 ms·
Sure it did. But those are the data that google is getting, it is network transfer trough its servers. They are far beyond "tracking the clicks". And btw, no. T
by stiray 4y ago
Sure it did. But those are the data that google is getting, it is network transfer trough its servers. They are far beyond "tracking the clicks". And btw, no. The DNS blocking is stopping only domains. The primary addressing level is ip and you cant block it by preventing access to domains. But you can do it using proxy (or firewall, but typically firewall is clueless about the data layer), that is why I made it and while it can read the pihole blacklist and use them, it can do much more (like screwing js browser fingerprinting on network level by injecting js that randomizes the image creation etc.).
- pedrocr 4y agoGoogle is not getting any data when you connect to a GCP VM through TLS. Or did I miss another huge PRISM-level scandal? Same for Azure and AWS. But if you block those no wonder a huge part of the internet is gone.
- sp332 4y agoThey know who owns the VM, and now they know that you connected, sent & received a certain amount of data at a certain time. [Edit: apparently this is more encrypted than I was thinking, so the next bit is probably wrong.] They could potentially look inside the VM to look at the specific data on the other side of TLS.
- carlivar 4y agoCan anyone provide proof that Google records this (for Google, not as network telemetry for cloud customers)?
- metadat 4y agoGoogle Cloud would be negligent if they didn't collect information about ingress and egress traffic mapped to each of their tenants. Since they own the servers and network, it's on them to be able to investigate and track abuse.
- carlivar 4y agoPerhaps I phrased it poorly. The inference seems to be Google using this data for their gain (beyond operational needs). Is there any proof of that? Or is my inference incorrect?
- cortesoft 4y agoSure, and your ISP knows every single IP you have connected to, too. That is just how the internet works.
- sp332 4y agoThe ISP only knows that the traffic went to GCP. Google knows which customer it went to.
- jeroenhd 4y agoeSNI (or similar) still hasn't been rolled out at large scale. If your ISP wants to, it can know what domain the application is trying to connect to. Domain fronting may confuse them, but most services don't use that at all.
- freeflight 4y ago> They know who owns the VM, and now they know that you connected, sent & received a certain amount of data at a certain time. Which is quite similar to meta data that's collected on phone calls, such data is regularly the basis for governments killing people [0] [0] https://www.justsecurity.org/10311/michael-hayden-kill-people-based-metadata/ https://www.justsecurity.org/10311/michael-hayden-kill-peopl...
- eurasiantiger 4y agoShow me the GCP setup that does TLS beyond ingress. Maybe you can find one in healthcare or finance.
- wombat-man 4y agoI know it blocks braze because an app I was testing it in an app I was developing. It's possible for them to hardcode IPs, but last time I checked they were too lazy for that. Maybe static IPs still cost extra? Some apps will do one DNS query and cache the IP they get, so maybe what you're seeing is them using IPs they cached before you rigged up this custom network situation.