3 ms·

> "API users exchange data with the server using hashed URLs so the server never knows the actual URLs queried by the clients". Privacy Theater. No real inform

> "API users exchange data with the server using hashed URLs so the server never knows the actual URLs queried by the clients". Privacy Theater. No real information is lost since all you need to do is have a database of domains and boom, hash easily reversed.

magicalist 11y ago
Please tell me you didn't just edit that wikipedia article and cite your own comment. Not only is that not a valid wikipedia cite, it's not even right. Only hash prefixes are ever sent to Google, and only if it's already tested locally that the hash prefix includes malicious sites. Humorously this exact same exchange took place in the linked conversation: https://lists.debian.org/debian-devel/2015/07/msg00232.html https://lists.debian.org/debian-devel/2015/07/msg00232.html edit: wow, it was you. https://en.wikipedia.org/w/index.php?title=Google_Safe_Browsing&type=revision&diff=671512026&oldid=670960707 https://en.wikipedia.org/w/index.php?title=Google_Safe_Brows...
- itistoday2 11y ago
  > wow, it was you. Yes, I did that for two reasons: - I couldn't find a better link for the citation and it seemed like rather important info that should be in the wiki. Maybe someone else would find a better one to replace it with. - I figured linking to an HN discussion would serve as a great citation, even if I was mistaken about something. Looks like HN didn't disappoint. :) EDIT: I've updated the wiki text to remove my previous edits and added a mention about the use of hash prefixes. > Not only is that not a valid wikipedia cite, it's not even right. Only hash prefixes are ever sent to Google, and only if it's already tested locally that the hash prefix includes malicious sites. Humorously this exact same exchange took place in the linked conversation: https://lists.debian.org/debian-devel/2015/07/msg00232.html https://lists.debian.org/debian-devel/2015/07/msg00232.html Thanks for the link and pointing that out, I stand corrected. I'm curious to know how big the prefix is. Depending on its size this either remains privacy theater or not.
  - magicalist 11y ago
    > I'm curious to know how big the prefix is I haven't looked at it in depth for a little while, but according to this it's the first 32 bits of the 256 bit hash: https://developers.google.com/safe-browsing/developers_guide_v3 https://developers.google.com/safe-browsing/developers_guide...

magicalist 11y ago

Please tell me you didn't just edit that wikipedia article and cite your own comment. Not only is that not a valid wikipedia cite, it's not even right. Only hash prefixes are ever sent to Google, and only if it's already tested locally that the hash prefix includes malicious sites. Humorously this exact same exchange took place in the linked conversation: https://lists.debian.org/debian-devel/2015/07/msg00232.html https://lists.debian.org/debian-devel/2015/07/msg00232.html edit: wow, it was you. https://en.wikipedia.org/w/index.php?title=Google_Safe_Browsing&type=revision&diff=671512026&oldid=670960707 https://en.wikipedia.org/w/index.php?title=Google_Safe_Brows...

itistoday2 11y ago
> wow, it was you. Yes, I did that for two reasons: - I couldn't find a better link for the citation and it seemed like rather important info that should be in the wiki. Maybe someone else would find a better one to replace it with. - I figured linking to an HN discussion would serve as a great citation, even if I was mistaken about something. Looks like HN didn't disappoint. :) EDIT: I've updated the wiki text to remove my previous edits and added a mention about the use of hash prefixes. > Not only is that not a valid wikipedia cite, it's not even right. Only hash prefixes are ever sent to Google, and only if it's already tested locally that the hash prefix includes malicious sites. Humorously this exact same exchange took place in the linked conversation: https://lists.debian.org/debian-devel/2015/07/msg00232.html https://lists.debian.org/debian-devel/2015/07/msg00232.html Thanks for the link and pointing that out, I stand corrected. I'm curious to know how big the prefix is. Depending on its size this either remains privacy theater or not.
- magicalist 11y ago
  > I'm curious to know how big the prefix is I haven't looked at it in depth for a little while, but according to this it's the first 32 bits of the 256 bit hash: https://developers.google.com/safe-browsing/developers_guide_v3 https://developers.google.com/safe-browsing/developers_guide...