Chrome sync warning, potential disaster for chrome users
11 years ago
Just encountered a potentially disastrous situation with google chrome, And thought I should warn everyone
I noticed today the web searches I did on my laptop suddenly appeared in my desktops browsing history, Upon checking through some settings I discovered google chrome automatically syncs browser history, bookmarks, extensions, login, and even open tabs across every device you log into your google account from. Meaning it is pure dumb luck I happen to use firefox at work, because if I used chrome there, all my porn tabs would have popped up on my work computer in front of everyone thus ruining my life.
I disabled the auto syncing But I'm mad as hell this dangerous feature was stuck in there like that and turned on by default.
Edit: Apparently there is some kind of "incognito" mode you can use to get around this
I noticed today the web searches I did on my laptop suddenly appeared in my desktops browsing history, Upon checking through some settings I discovered google chrome automatically syncs browser history, bookmarks, extensions, login, and even open tabs across every device you log into your google account from. Meaning it is pure dumb luck I happen to use firefox at work, because if I used chrome there, all my porn tabs would have popped up on my work computer in front of everyone thus ruining my life.
I disabled the auto syncing But I'm mad as hell this dangerous feature was stuck in there like that and turned on by default.
Edit: Apparently there is some kind of "incognito" mode you can use to get around this
This is why I don't like Google. They blur the lines between their services, and try to spread and share everything everywhere.
I want to be able to use services without them trying to make everything I do visible and everything public and stored in the cloud and tracked.
There are settings in Chrome. In Firefox even. Research them and use them. There are plenty of "tips and trick guides" to using Chome, Google, anything, etc. You can "Bing" it for all I care if you don't want to use google.com
Also incognito mode.
I know what I'm doing.
And yes, I use Firefox, cookie management plugins, noscript, adblock, etc. I also do my best to control Google's settings so that they are less invasive.
But Google products are by nature invasive of privacy because of their ultimate goal being data mining. Google may be doing it "with your permission," meaning you agreed to it somewhere in your terms and you can turn it off, but Google's account controls are confusing, hard to use and for many casual users not that easy to find. Google auto-enables many features which reduce privacy and increase their visibility online. Google badgers users to collect cell phone information, real names, and to not use account usernames and pseudonyms on sites like Youtube, wanting to drive everyone to G+ and inflate their user statistics. I don't even use the G+ page that one of my email addresses is automatically linked to, but I do get strangers adding me to their circles and my page suggested to random people I've had email conversations with even though there's nothing in it.
And don't get me started on how frustrating using an android phone is. Thank god cyanogenmod and its privacy apps exist.
This example in the above journal is a perfect example of where Google is doing something that, while it may technically be "with the user's permission," is something they would not be aware of, is potentially a liability to their privacy, and is very unwanted by many because of Google's emphasis on the cloud, on syncing everything, and collecting data about everything users do.
TL;DR: It may be "with the user's permission," but things that Google does are often unsuspected by their users, potentially privacy damaging, invasive, and often ethically questionable/manipulative.
About your G+ issue, you do realize that they don't see what you don't want to share with them, right? They are only able to see your public posts - of which there is even an option to not share with the public. It's that simple. If you have nothing on your G+ page anyway, what's there to even worry about? It's not like those people now have this godly ability to look into your emails and life. They're just following a blank page. That insecure? You can block them too.
Now that I've humoured your paragraph, I'm going to get back on the main point.
The example in the journal was purely a matter of inattentiveness. As you can see from the rest of the journal, if you've even bothered to read it - A LOT of people were very aware and utilizing this option just fine. They're very transparent. And again, as I've stated a bit further down below and above. If you're going to go into public - use your fuckin' incognito mode.
TL;DR: If one is that paranoid and unaware of their options, I think they should stay away from the internet for their own sanity and mental well-being.
The point about the EULA is moot because the information about this feature was made public knowledge outside of it - y'know, as many others have stated. I apologize for your lack of time, as I understand very well the importance of other things that may take up your time. Be it porn, work, etc. I would encourage you to just skip to the privacy parts of said sections in the future, you don't have to read everything if you know what to look for. Look into something called Spreeder if you want to zoom through it. It's good to know what you're signing up for instead of raging afterwards. Just my 2 cents.
Annnd that's why I said if one is paranoid. I don't think it's obnoxious or invasive, but I suppose maybe that's just me and a "few" of the others here. You're always welcome to use alternatives if you're that dissatisfied. You didn't pay for it, after all.
Nope nope nope.
If your navigator, web application, etc are set by default with "share everything" that' s bad desing, bad practice. There is no excuse like "you can turn it off" or worse (in fact worst) "nothing to hide, nothing to fear". I myself found this sync stuff by accident, at work, simply because Google keep marking as read links I clicked at home. If that' s a feature that should be positive, it should not be introduces stealthy and never, NEVER by default to existing users, that' s just bad practice in any and every system.
And last of all, invoking the "you didn´t pay after all" is completely missing the problem again, with a total fallacy. Money is not the point of contingency, is data and the incorrect usage of it.
BTW, I use incognito mode and has inconvenients of its own, but is better that an inconvenient site (like this one) popping onto others view when it shouldn' t, just because Google suddenly decided to treat every device as part of a big workspace.
I will accept that the point about payment or lack thereof was not needed in my argument. As that comment was meant to serve a different purpose and should've been clarified as such. Still, it does not suddenly make everything else that I've stated false.
Now if I may quote you -
"Nope. Nope nope nope." I'm afraid I have to disagree with what you've said as again, like with others, you've missed my point. They've made it transparent to new and existing users (as I and many others can tell you, should you care to read further). It is not their fault that you found it by mistake. Though I am glad you are aware of it now, this has already been public knowledge.
Your section on incognito mode is a bit incoherent, but I'll do my best to interpret and respond to it accordingly: I don't find it inconvenient, far from it actually - just a simple shortcut to open Command + Shift + N, or use Ctrl instead of Command for PC users. It gets the job done for this journal entry's problem.
^
As
PS > Future tip > Please consider reviewing your comments and facts before unleashing what appears to be an emotionally charged, somewhat incoherent, and inaccurate response as you did before your roommate corrected you.
There are your hard facts, buddy.
This is enough to make me terribly wary of anything they do. It's also why I simply do not use their web browser and will have no need for a Chromebook.
But when Klorsis brought it to my attention, I quickly owned the fact that I had misjudged the circumstance.
By the way, Klorsis already set me straight, so you provided no new information here. You just had a more rude approach about it. Maybe you could stand to learn some manners instead.
You might want to reread your last two lines about Klorsis. Unless Klorsis was the aforementioned roommate of yours, I don't see a sign of acknowledgement from you otherwise. Or are you HammyToy in disguise? D: And again, my original point was for you to fact-check and review. Manners are merely subjective. Facts aren't. That is all.
Hope you have a lovely day~
PS Also, to futureproof this, I hope you understand that NOWHERE in this response am I saying that I disagree nor agree with the links you've posted. Sure, they're facts, as you like to put it - but irrelevant.
Klorsis is my roommate, and he pointed it out to me first, so then I made my follow-up comment about it. After that he added it here on the journal.
I admit I was originally commenting on Google based on personal perspective from what I've discovered of their 'exploits' and judging Chrome per my knowledge of many of Google's other less-publicized shady activities. Their software was made guilty by association. If my neighbor's front yard has an aggressive dog in it, I don't assume his back yard doesn't. I err on the side of caution. Fool me once, shame on me. Especially since I don't need to go to his house to begin with. ;)
Manners may be 'subjective' but they're a reflection of your over-all behavior. So I'm lead to believe that you're not a very nice person by how you respond to messages. It's also still culturally desired protocol and expected for any legitimate debate. Otherwise a prompter will gladly shut off your microphone and not invite you to future debates. Being rude does nothing but make you an undesirable person to interact with.
The ultimate issue with Chrome is that they leave syncing enabled by default without any warnings that logging in on another chrome browser elsewhere will launch a syncing frenzy. I can program a 'Do You Wish To Sync Now?' window in every programming language I've ever laid my fingers on. I strongly doubt that they couldn't add that step.
This way only those who want these features will have them.
Why should it be what you say it should be? Making it your way would be inconvenient for a lot of people who are already utilizing it.
Seriously, read the rest of the journal comments. I don't see why they should change it, as they were very transparent since the beginning - and thus the problem here-in lies with people being too lazy to uncheck the button to opt-out, or people who are impatient and don't bother reading.
At the end of the day though, you're right, we really should check for this type of thing anyway. But keep in mind, most people have never heard of anything like this so they aren't looking for it (i.e. anyone born before the 21st century.)
They tell you right off the bat that if you 'log into' Google Chrome with your Google account, it'll sync with every computer you log into that to. This does not mean going to google.com and logging in. It means going into the browser menu on Chrome itself and selecting "log in".
This feature's been around for ages, has been published for ages. Just because you don't pay attention to the prompts when it pops up and says "logging into Google chrome will share..." doesn't make it nefarious activity by Google. It makes it you not paying attention.
They've detailed what was going on since the beginning. It's not their fault (nor does it make them "dangerous") that anyone on this page who suddenly found out about this feature didn't just bother to read.
If you're going to fuckin' browse porn - do it in incognito.
If you're going to work, use a work email. Even better, use incognito mode there so that when you exit the browser, NOTHING gets saved. That's what I do.
PSA: Incognito mode = Private Mode.
It's not actually on by default. Only when you choose to sign in specifically for the chrome application (which is to say that going to google's website and logging in there won't sign you in on chrome's sync settings, should you choose not to set your computer up for sync)
Highly likely that you may have just missed available options while you were doing the rush through installation or something. They're pretty transparent about it honestly.
---
Definitely wouldn't sign chrome into an account at work though - the settings for sync are too unsecure from what I've seen. There's no way to lock them as whatever you've set up in the event that you're sharing a machine with somebody who has the mind to go snooping around and changing the settings to something other than what you configured them as. I guess they expect people to be using windows user accounts or something instead maybe.
Well, I'm thankful all turned out well despite the scary realization it may have been a lot different.
Kind of what I did on my FaceBook account. I knew from day one that the thing was trouble. Rule one: No furry links. Sure, it meant ignoring a few 'friend' requests. But, that rule stands.
In a similar vein, I get really peeved off when I go to some random questionable website and 'bam', see a picture there with my face on it because it has "Facebook integration". Somehow I signed in and now I'm suddenly one-click away from broadcasting on "The Wall" about some unspeakable fetish.
Was also pretty disconcerting when that Youtube/Google+/Real Name crap started showing up and I was getting recommendations to add people I knew from college/high school to my private accounts. Do not want!!
Makes me doubly glad that I have almost no presence on mainstream social media, even if it does make me pretty much the only person at my office who is 'off the grid' ^_^;
Sure hope FA never ties a bond to FaceBook/Google/or other such Ex-girlfriend(lover) type websites. To think, in the age of information being so freaking valuable, why must such sites blab everything??? Besides, next thing you know, the things will be interfacing with traffic cameras and identify your vehicle make and plate number to blab about everywhere you go and your daily schedule and where you live and...basically, they've gone too far as it is and still have room to go way beyond that point.
At least, since I opt to view YouTube from a PS3, it has this app that could care less about log ins from Google to use.
My trick is to not sign into google directly.
I only log into youtube, and thats with a yahoo account.
It works for me, none of my chrome info has synced anywhere yet
It's pretty easy to turn on and off and i kinda thought it was a like... pretty up-front and primary feature of chrome and google accounts in general....
I'd suggest you also add in your journal the advice to use private browsing when in a public/work environment. It'll save you tons of trouble - so long as you exit the browser when you're done.
I actually once had this scenario happen to me, but fortunately i had the unbelievable luck of clumsy co-workers.
I used to work at a design company which has internal chat and email synced with google; so we used our google accounts on the job to use jabber and other stuff for inside communication.
Anyway, I only worked there part time and my computer was shared with another dude. The guy complained he had "weird pop-ups" and they thought he had somehow let ad-ware or a virus into the computer.
The computer was formatted and everything was "fine" for the first day, and then the "weird pop-ups" came back. Well... Those "weird pop-ups" were my remote activity synced by google.
I was VERY lucky this guy just had no idea what was up...
Oh, and I'm sure that if the 'powers that be' get the final say, anything porny will become illegal. And, having all that Cloud data at their beck and call that links directly to ______ @ _______ will make pressing pressure so easy...
I'm also convinced that it's a dark secret behind the creation of G-Mail. So much data, stored in one place. Imagine how easy that makes data statistic gathering for someone to learn trends, create sales pushes or even bust suspected crimes. (To whatever 'they' want to classify a crime consisting of.)
Ahhh...the alterations of facts in physical production mediums. I'm reminded of something I heard, quite a long time ago. Supposedly in the Bible, despite the centuries of potential alterations that kings and religious heads might have influenced upon it, there is suppose to still be a surviving reference to Gods...as in plural...written somewhere amongst it's pages.
"You shall have no other gods before me" Exodus 20:3
"Will you steal, murder, commit adultery, swear falsely, make offerings to Baal, and go after other gods that you have not known" Jeremiah 7:9
"You shall not go after other gods, the gods of the peoples who are around you"
Deuteronomy 6:14
At least a dozen more references here, I also recall biblical references to Ashtaroth, though I don't remember the book.
Fun stuff!
There's a HUGE screen when you sign in about it and it has a bunch of checkboxes to pick what you sync. It's also a really old feature. Couple years now.
I've never gotten the open tabs to sync though, funnily enough, even though I have it on.
Just turn off the syncing in the settings.
It's by pure lack of luck that you may have not noticed the feature at all
it pretty much pesters you all the time to turn it on either to sync all or just the things you wish
Good thing you noticed before disaster though
I would never have caught that.
It's really stupid though
Yet.
Lucky you found that out before something bad happened. D:
Die-Hard Devout Catholic Christian Chinese Parents................................. not pleased.
This is why I don't bookmark porn period o3o
It always has been the most unsafe, privvy browser, and is also linked to critical parts of your system.
As for Firefox. I won't touch it at the moment. The new CEO for Mozilla donated money to the whole prop 8 movement in California a few years back. Not going to support that kind of individual or company that would make him their CEO.
I personally will hate him. You support denying me the same rights as everyone else you get my hate. Pretty simple "you meaning the ex Mozilla CEO"
I see it like this.
He donated $1000 to prop8. he is/was Ceo of Mozilla when this conversation began. That put him in a position of power. with great power comes great responsibility as the cliché goes. (Thanks spiderman) Had he stayed some coder somewhere in the structure no one would have cared. But as CEO one could easily think that because of his giving money to prop 8 that supporting his company, Mozilla, would be furthering his ability to support that sort of cause and I consider myself smart enough to never work against my own best interests.
But yea. I agree with your reasoning as well.
Have not run into this as I do all my personal surfing in firefox and all my work stuff in IE.
And all the porn? In incognito mode. :)
It is dangerous, umpleasant or simply inconvenient if tyou have things that you prefer not to share being shared by default. The only fault by google is that' setting "share" ON by default.
It doesn' t have to be compromising contents like ponr, I found it while searching safe stuff at work, there was stuff that would stick to the search story and was quite inconvenient.
But yeah, I prefer/use Firefox, and they do have an option to sync, but you have to go looking for it.
But seriously, to actually be helpful, here are the chrome settings you NEED to set:
Under Privacy:
[OFF] Use a web service to help resolve navigation errors
[OFF] Use a prediction service to help complete searches and URLs typed in the address bar
[OFF] Predict network actions to improve page load performance
[OFF] Enable phishing and malware protection
[OFF] Use a web service to help resolve spelling errors
[OFF] Automatically send usage statistics and crash reports to Google
[ON] (but most sites wont listen to your pref anyway) Send a ‘Do Not Track’ request with your browsing traffic
Under Search, click "Manage search engines" and delete every single one of those fuckers that isn't Google; it prefetches search results from them, so searches in the omnibox are sent to every single site in that list. Awful.
Also chrome is a botnet for google, so use chromium and install the https everywhere and collusion plug in.
The concept of a browser requiring a login would make me laugh all the way to the uninstall button anyway. =D