It seems to me that adding AI to desktop apps and sending the data back to the mothership for processing is an amazing way to collect data from people who, for the most part, would be completely unaware it's even happening.
> Heck, most of them think the Internet is Chrome.
In the end Google has achieved something that Microsoft couldn't with Internet Explorer, and won the Browser Wars.
Google managed to aggressively advertise their browser by optional install "offer" within Windows installers of software. And they were aiming exactly at all those who couldn't tell the difference between the web browsers and who were conditioned by more experienced family members, friends etc. to just blindly click "Next Next, Finish". Thus, that was an easy win.
Being here when we had choice between Gecko, Presto, Trident and later WebKit/Blink makes me sad how easily the IT world allowed this nearly 100% monoculture to happen. There are still other browsers but chances that we return to variety and choice of rendering engines are low.
What annoys me the most about this is that we as web developers have been here before with IE and managed to get out of it. Then we immediately forgot that lesson and helped Chrome be the new IE in a new coat by adopting ”modern web API’s” that were in fact proprietary Chrome API’s with low respect for the standards process, until every other browser was forced to accept it as a standard. All those ”Safari/Firefox are lagging behind” or ”best supported in Chrome” wasn’t in our best interest or even, from a standards perspective, particularly true.
Every vendor tripped over the third party affiliate human review issue.
While consumers remain surprised by affiliate clauses, the QC problem is considerably different from marketing against those recordings.
The linked article veers into Alexa for the ads part and says, roughly, must not be tin foil hats if everyone believes it – then explains the psychology misleading people in most cases. The "I'm noticing a pattern" thing…
Are there sources where Apple either acknowledges or even settles claims of advertising against secret Siri recordings?
Something no one else would want - a little colored dot next to HN user names keyed to their generation, so I could quickly tell why none of the commenter mentioned AOL.
Great joke, but taking the word literal and not as product name, it makes a lot of sense to describe chrome as a tool to explore the internet.
(Edit: thinking about it, I think generic terms like "Internet Explorer" should not be trademarkable at all, also I just learned, that also Microsoft "stole" the name and had to pay in a settlement..)
No, I think it was meant literally. Like the IT Crowd skit where Jen refers to the Internet Explorer desktop shortcut as "the button for the internet".
I'd argue that even pre-AI the average internet surfer never thinks about all the data the sites they use collect. I'm not even sure if my mom uses any apps that aren't web apps (maybe MS word).
But for it all to go to one place? That's a scary amount of data.
I called this out when it was announced on here. Supposedly the team lead replied to my comment saying this wouldn't happen. I rolled my eyes but asked will android be able to use those models for ex filtration. No reply. And apparently the original claim was not true either lol.
Maybe I'm misremembering it. Google is awful. My goodness. I hate Android and can't wait to be rid of it. Graphene and it's buddies can't roll it fast enough
What you should've done is saved what they said so you could post it directly as evidence. If they're collecting all the data they can, you should naturally also have the right to do the same! I've noticed they're increasingly memory-holing a lot of things that, somewhat coincidentally, are inconvenient truths.
It's in my comment history..sometime last week. I don't really care, I knew this was a surveillance move that's why I called it out. No clue if the anonymous poster was who they claimed to be anyways
Does anyone believe a single big tech company isn’t harvesting data en masse from everyone in duplicitous manners?
Like, the best case scenario is that they don’t just blatantly steal your data and instead use dark patterns or inference to take from you without your knowledge.
And then, thanks to the wonderful opinions of the court, the government has full access to said data since you apparently knowingly agreed to giving it to a third party by virtue of the fact that you engaged in any sort of commerce.
It’s why I’m for forcing content being posted on the internet to be non anonymous and tied to a real identity.
The corporations and government already have and abuse all this data. I want the benefit of knowing when someone says “As an American {incredibly divisive shit}” that it’s actually someone in a foreign country sowing chaos for money or political aims.
They won't actually show you who said what though. Twitter trialed that feature then they quickly turned it off after everyone realized half of the maga influencers were russians.
It also kind of stinks because not every mistake should be immortalized and recorded forever. Blackmail and all that. It kind of ruins the internet in a different way.
I want it enforced at a governmental level. I don’t think content consumed by people should be required to be public but if you want to post on a public square that the internet is, I should be able to recognize you as well I could in meatspace.
We get all the negatives of anonymity now with foreign actors, domestic actors, and bots flooding the zone with lies, and not of the benefits since all the corporations and governments can trivially pierce that veil.
I assure you they cannot pierce that veil if one has a modicum of competence.
One uni in my country has been getting bomb threats during the exam period every year for multiple years (a random article says 20 times at least). The whole place gets evacuated each time, nothing is found and nobody is caught.
But people who think they're anonymous because they used a different nick? Yeah, those are idiots, their ISP and the platform knows who they are and anybody can deanonymize them through stylometry.
I don't think surveillance is the solution though. I'd much rather see a network of trust or (second best) anonymous proof of identity.
Any place selling alcohol or cigarettes is able to check if you're 18. They could just as easily check your nationality by looking at your ID and give you a crypto key which can be used to prove that to online platforms without revealing who you are.
But there's no money for big corps in that and most people are not even smart enough to think of it.
Every single packet of information sent on the internet flows through NSA servers at some point. We've known this since Snowden. When I say the government has this information I do not mean that every single bureaucrat at any level of government can access this, but that the government as a whole has access to the information if they feel its worth using. We have limitations on how the government uses such powers but those are currently worth the paper they are written on and being ripped up left and right.
That's defeatist, although certainly what they'd like. The world is not the US.
Even if NSA captured and logged all internet traffic, they'd still only get a fraction of the information within without breaking all the encryption.
And even if they could break the crypto, the ability would only have any power if/when they acted on it. Which in turns reveals the capability to both normal people and other nation states.
The limitations aren't laws, it's the practical consequences.
Beyond the easy quip, my point was that "big tech" has taken on a far-too-narrow meaning. I'd bet you didn't really mean "software" either - you were, in effect, referring to the whole amoral (at best) ecosystem of companies which run social media and related web sites and data infrastructure, making their money through addiction, exploitation, and extraction.
Perhaps Cory Doctorow will come up with a better term?
According to the current shortage of computing power and electricity, I suspect that what they really want is not your data, but the computing power and electricity from your device.
If users' behaviors can be pre-labeled on their own devices, processed with AI, and then sent back, it might save a significant amount of internal computing costs.
The even more frustrating thing here is that after auto-updates everything new [including AI "features"] is turned ON by default.
I do like how Firefox now has a "prevent future AI integrations" checkbox[0], but I just don't believe it anymore (i.e. that it won't magically `uncheck` itself and then enable features I've not requested/authorized).
Which is why I just used an LLM to help me create a local network admin rule to disable the update engine entirely (this SHOULD. NOT. BE. NECESSARY).
I'm just not sure how this gives me control of my information, whether I want it sent or not to Google, and if they're retaining it for training or not.
That last question I don't even want to ask because the first two doesn't seem clear.
This could be simply fixed by adding the feature, and defaulting it off, and letting people learn about it and enable it.
My belief is that the AI business is all about data collection. The value isn't so much in the quality of the models (that's what enterprise customers and developers pay to get), but in the amount of data that comes "for free" to whoever hosts the models. And then it's worth whoever buys it thinks it is, like insurers or advertisers.
it's more like knowledge extraction at this point. younger generations don't build up knowledge any more, everyone else is slowly losing their knowledge by not using it.
Eventually the rug pull comes and knowledge will only be accessible by those who can afford it.
It’s because they’re all in bed with the Government who wants the same thing. Think of them as an extension of the NSA/CIA and the byproduct of the data collection is being able to sell Ads to make money.
My guess: people would ask way more for that kind of information. That's why it's a totally immoral business: making people give away something they would never agree to give for free, if they were truly aware of it.
When you use a coding model running on someone else's computer, you're giving an AI company your proprietary source code and associated documentation, and you're giving free training examples to make a future AI model better equipped to eliminate your job. Valuable data indeed.
Which is why it is odd to see so many companies jumping on the bandwagon, even those that have always been super protective of their oh so valuable proprietary internal code.
Yeah I was wondering how long it would take for a browser company to do something like this. It lets them scrape data without having to deal with anti-scraping provisions on websites, since now their training data collection gets spread across the entire Chrome userbase and they're able to offload the work of bypassing the Cloudflare captchas or whatever to their end users.
Up until ~2 weeks ago, I believed that at least opting out of data collection would protect me. I no longer do.
Everyone knows that fines paid by companies (instead of the people making the decisions) are considered simply a cost of doing business. A probabilistic tax, if you will.
What finally dawned on me is that given they need more and more data to train bigger and bigger models, at some point the value of using my data for training will exceed the cost of getting caught using it without/against my consent.
Yes. It is seriously not a coincidence that all of the ai companies are now offense contractors for the department of war. It's also not a coincidence they want to ban vpns, and force people to verify themselves with IDs, biometrics and their phones for all of their activities. Meanwhile... Bots can run free.
> My belief is that the AI business is all about data collection.
In the short term, maybe. That's what you tell investors.
In the long term, it's about altering, shaping, and even constructing reality: making a new and canonical truth for humanity where the ruling classes are invisible to us and the machine that tells us our history and bedtime stories and how we feel is in every device we carry, until it is everywhere, and it has always been everywhere, and it will always be everywhere.
This seems somewhat specious - it's also quite possible that they just altered the wording to make it less verbose. Does anyone have access to the link "Learn more about on-device AI"?
If Chrome starts sending data from the browser back to Google, that's going to be a huge compliance issue. If you work for a company that processes customer data in the browser, you're going to need to ban Chrome.
Chrome has been recording metadata (URLs, timestamps, etc) about your activity since forever, and you can turn this off if you like, see https://myactivity.google.com/myactivity.
> Some AI features in Chrome do not rely on on-device Generative models, and those features may still run even if the on-device Generative AI models are removed.
it already sends data back to google, the ai stuff, everything that goes in the address bar goes straight to google unless you specifically configure chrome to block it
the on-device ai just offloads some work onto your device
i doubt anyone will be banning chrome, for some reason "it's for ai" is a valid excuse for any amount of sillyness
Yeah, I staunchly refuse to believe an ad company that releases a closed-source browser would violate our privacy. You're probably right that they changed the claim simply because it was too verbose. That's the best and only explanation.
I know that I'm in a bit of a bubble with this one, but I am surprised there is still anyone using Chrome instead of Brave. I get the dependency on Gmail other Google-specific tools, but the built-in ad blocking and Google-free aspects of it made me switch instantly and haven't look back after years.
Chrome has stayed incredibly sketchy from the beginning, when Google gained marketshare by sneaking Chrome into the installer for other products that people intentionally downloaded.
Then Chrome did things like "accidentally" uploading your entire browsing history to Google servers when you signed into Gmail.
Now they have declared war on ad blockers, despite the government warning that ad networks are too big a malware vector to ignore.
All they did was add their own affiliate link to crypto links that didn't have them. You didn't get tracked from it, and you didn't lose out on anything.
Still sketchy because of the lack of consent, but people act like Brave personally stole money from them.
The other "sketchy crypto stuff" is one of the few actually workable alternatives to funding websites with ads on webpages. Again, Brave took in no money (BAT) that you as an admin / creator would have otherwise had, and they keep it in escrow, they don't claim it.
The only other sketchy thing I can remember is pre-installing a deactivated VPN so that people could pay, push a button and it'd work immediately. Plenty of companies do hacks like that for the sake of UX. Dropbox used to hack macOS its Accessibility permission so people wouldn't have to dive into settings to toggle certain things.
The irony is that Firefox has had their own scandals like surreptitiously installing a hidden ad extension that would advertise for Mr. Robot, but somehow Firefox stans have erased that kerfuffle from their collective memory.
> The irony is that Firefox has had their own scandals like surreptitiously installing a hidden ad extension that would advertise for Mr. Robot, but somehow Firefox stans have erased that kerfuffle from their collective memory.
Brave is my default browser for non-sensitive tasks; e.g. most web browsing, GitHub, news, etc.
The built-in ad-blocker & tracker blocker alone is worth it.
Use chrome for testing.
Stock Firefox for anything sensitive.
In my mind, no browser is perfect. However, as far as I can tell that’s not nearly as sketchy as the title implies. It’s for local debugging.
Zen has other issues for me on Ubuntu (eating a ton of resources) which is why I usually use FF. But I put Zen in a different category from Brave and definitely better than Chrome.
I switched to Firefox when Chrome started messing with the ad blockers. Haven't really had any issues. I prefer developer tools on Chrome but I rarely need to use them anyway.
The trouble is that Mozilla has admitted they can't survive without Google's revenue. You are basically using Google by proxy unless you use a truly independent browser engine of they get blocked by Cloudflare for not having enough fingerprinting tech.
(Ungoogled) Chromium and Firefox are both projects that are open source and readily available. The code is sitting there ready for you to compile. More users = more donations. You can be the change you wanna see.
What browser can genuinely claim independence from Google? Chromium browsers are all arguably in the same camp. If FF is implicated, then so are forks like Zen.
> You are basically using Google by proxy unless you use a truly independent browser engine
This conclusion doesn't follow your premise. Google has to pay because if Mozilla dies, so does the claim of any real competition on the browser engine market. So everyone agrees Firefox's engine is truly independent. Google pays so Firefox users don't use anything that has to do with Google.
If you think about it, the only real way to not hurt Google is for Firefox to stop existing. Chrome would end up being spun off from Google.
I don't agree that you are using Google by proxy when Firefox has more technical independence from Google than Chrome and can be quickly decoupled from the few Google defaults it has, search and safe browsing.
Because some things only work in Chrome. It's a fact. It's terrible.
We're the frogs being boiled, over the last decade. People sounded the alarms, but they were looked at like they had tin foil on their heads. Now, it's clear they were right.
I'm speaking generally, of course. I use Firefox for all my personal stuff, except for those situations where it doesn't work.
Chrome likes to make up new "standards" and then some websites adopt them immediately.
That said, I can only remember two instances of that slightly inconveniencing me in the past, and both times I was inconvenienced by a Google-run website: once upon a time Google Earth refused to work, and once upon a time I couldn't tweak my Google Meet background. Both are no longer the case.
Citation needed. I've seen the opposite--unless there's a very specific niche that can't be otherwise solved, there's huge internal resistance to going it alone.
The biggest counterexample I can think of: WebUSB was critical to Chromebooks supporting external devices, but I can see why Safari might not want it. It has Firefox support at last, though.
Citation of what exactly? That not all browsers implement the same thing at the same time and that some features are Chrome-exclusive because for one reason or another other browsers refuse to implement it?
Is that really something you need a citation on? You sure seem to have come up with an example of your own.
In the past there were features that didn't work at all; I used to hit those regularly. Device setup flows, AV features, etc. These days, it's never "this doesn't work on other browsers". It's always "this is worse on other browsers", whether because they don't test it or because they don't care.
YouTube is terrible on Firefox. There was a period where it was usable but got increasingly worse with missed frames, low frame rate. On FastMail and Gmail the expanded search overlay doesn't disappear when you click outside (ESC doesn't work), you often get stuck with it. On YouTube when you stop hovering over the "I like this" etc. on full screen video view, the tooltip doesn't disappear. It's death by a thousand cuts.
A lot of IT now curates the extensions for the browsers and doesn't allow extensions not on the whitelist and then they basically just only do that work on Chrome and disable Firefox. It's kinda self defeating in the long run imo but that's the problem in the industry.
I've run into a few restaurant sites whose ordering pages just do not work properly (or at all) in Firefox. Also webgl2 performance is unfortunately still much better in Chrome vs Firefox; as an example, FoundryVTT (virtual tabletop software) works fine in Firefox but is a stuttery mess IME (though it has improved slightly in the last few years).
ups.com is one that really infuriates me. It shows 404s for me on Firefox and works perfectly on Chrome.
Kaiser's website works mostly on Firefox. Recently I had to print a "letter" and on Firefox it was blank and printed fine with Chrome.
I don't know if it's still this way, but Google Meet didn't work very well in Firefox, so last year I took all my meetings in Chrome.
These are just what I remember. There are a LOT more.
EDIT: on the UPS thing... it happens when I follow links from gmail in Firefox. Sometimes it wouldn't 404, but I'd see a "..." and it would just stay that way.
EDIT2: for a long time (not anymore), sending Kaiser emails was broken. Hitting enter would warp to the bottom on the page and I'd have to scroll back up to finish typing. They're completely redesigned the website recently and that bug is fixed.
95% of people who use Chrome have no clue what browser they are using.
They got Chrome when it was bundled with every single installer ever for about a decade (which was so prolific and scummy that Microsoft had to make the "default app" picker system more defensive, because Chrome was abusing it more than microsoft apps were).
When you installed Java, you also got Chrome set as your default browser with no interaction.
Or they one click downloaded it from Google.com because of a giant banner saying "You gotta download chrome"
It's insane to me how rarely people on HN seem to actually know the history of this. Everyone who worked in tech support in the 2010s experienced this.
It was an identical strategy that most spyware and adware used at the time.
Not everyone has a well paying tech job. Many have to use their devices until they literally die and many more choose to do so because getting a newer device would mean having to deal with the bullshit of newer software.
1. Because it's most popular. Guaranteed support and "monkey see monkey do".
2. The adblocking is preconfigured, and non technical users trying to find the right extensions has a very bad history of unintentional malware. Ad block? Adblock plus? Ublock? Ublock origin? This is a great example of what floors a lot of technical folk who would be "why not just install ublock origin" and fail to understand the "why should I when I can just get Brave one and it works"
If you're anti-Google, use Firefox. It's hypocritical to use the browser they're paying to build, then complain about how they generate revenue to fund it.
After years of using alternative to chrome (Firefox, Chromium, Brave, Opera, Vivaldi, Edge, etc ...) I have stopped fighting the choice of IT for installing and setting Chrome as the default browser on a Mac. I still use Firefox when I can and religiously reroute URLs to it where possible, but this is beating me down and I would rather spend time playing with LLMs rather than continue this struggle.
Brave’s owner is a very sketchy dude. With all the news that were happening around brave, all the shitcoin stuff, I wouldn’t be surprised if the browser is mining crypto.
The single affiliated link scandal is enough to not touch that project with a ten foot pole.
I was using Firefox, Vivaldi, Zen, and finally got fed up with various issues that Zen was having, so I switched to Waterfox. I am very happy and the browser is very fast; difference is immense.
To each their own, but I've been using Brave for a long time (5+ years I think?). It was one or 2 clicks to turn off the crypto stuff when I first installed it. It was straightforward and no dark patterns were employed. It has never come back, unlike what Google and Firefox tend to do with their annoying features. It even syncs my preferences to any new browser I add so I only had to do it on one computer once and never worry about it again.
The web's dependency on Chromium engines is deeply concerning, I agree. I used Firefox for a long time. But at this point, IMO Brave is the most pragmatic choice if you want a browser that's not Google but "just works" with the modern web.
Vivaldi just works without annoying crypto and most importantly provides lot of customization, brave feels like barebone browser next to it, hard to understand why someone stays on such basic browser not allowing any customization (tried both and was shocked how bad is Brave many promote here).
I use thorium, which also belongs to the empire, so it is not really any different to Brave - but I can use ublock origin still, so that's better. I think we are all in the Google empire here. Praising Brave as alternative, simply does not make a whole lot of sense really.
Firefox is a bit outside of it but it basically got rid of most of its users. When I use firefox, I can not play audio on youtube videos. It works fine with thorium. I tried to convince the firefox developer who said everyone on Linux must use pulseaudio (I don't) but there is no reasoning with Mozilla hackers here. He thinks he knows better than everyone else does. (I could recompile firefox from source, but Mozilla uses mozconfig still: https://www.linuxfromscratch.org/blfs/view/svn/xsoft/firefox... - they are too incompetent to transition into meson or cmake. A failing project, no wonder it lost most of its users. Titanic got nothing on the Firefox team.)
I want to use a browser engine that is not developed/owned by Google, so I use Firefox. I also don't want to support Brave's CEO's politics, so I would not use Brave regardless.
My theory is that, since I'm going to do things like banking in my browser, I want one that has a lot of skin in the game. Chrome being backed by Google has trillions of dollars on the line should they ever do anything truly evil. Though this sneaky 4GB download comes close.
For someone with more knowledge than me: How does this affect other Chromium based browsers?
I did some web searches and see Brave has its own AI thing “Leo” that is intended to preserve privacy. But I don’t think that is on device. Please correct me if I’m wrong.
I use Firefox myself but have family and friends who use various Chromium based browsers.
Chromium mostly does not support this, because it doesn't have the binary blob required to run the inference. However, it does still download the model weights and expose the LanguageModel API, because that part is hooked up.
Packagers might eventually disable that but I tested this behaviour in chromium 148 a few hours ago, and it would download the weights but has trouble running them.
Brave's "Leo" AI is configurable enough to specify local endpoints for processing, instead of going wherever they want it to go. I've set it up to use my own systems, and it works just fine like that.
If you have a beefy enough device, then yes this can be done on-device.
My guess is that this falls under a Google service and the models themselves wouldn't be added to open source Chromium. Even if it were, Chromium forks would likely exclude it like they did for FLoC because of its unpopularity.
The docs say "not yet."[0] My guess is that for Android they probably plan to enable it for high end phones, and for iOS they'll probably just stick to non-API AI features.
Surely there's a googler on here who actually knows whether they are doing this. Anyone actually know or is this post all about Chrome bashing and speculation?
These "clicks" are likely identified as fraudulent and dropped by the ad network. So you still pay the cost of downloading and running all the advertising JS and you still get tracked by the ad networks, all for nothing.
You seem more knowledgeable in how browsers and js work than me. Does the below text still mean that AdNausem is downloading and running all the advertising JS?
Here's what's in the link:
>AdNauseam 'clicks' Ads by issuing an HTTP request to the URL to which they lead. In current versions this is done via an XMLHttpRequest (or AJAX request) issued in a background process. This lightweight request signals a 'click' on the server responsible for the Ad, but does so without opening any additional windows or pages on your computer. Further it allows AdNauseam to safely receive and discard the resulting response data, rather than executing it in the browser, thus preventing a range of potential security problems (ransomware, rogue Javascript or Flash code, XSS-attacks, etc.) caused by malfunctioning or malicious Ads.
Basically zero ads are just static images with a link, they're dynamically loaded by JS when you open the page. The JS collects as much tracking data about you as it can, sends that off to the ad network servers which run a live auction to determine who will pay the most to show an ad to you right now, then returns that ad for the JS to display.
AdNauseam not loading the response to the "click" request makes it trivially easy to flag as fraudulent, because a real click would load and run the response.
The same metrics any site uses to identify bot behavior. It's a closely guarded secret because if the attackers knew what metrics they used the attackers would know how to not get caught.
Another reply pointed out that AdNauseam just makes an http request to simulate a "click" and throws away the response. A real click would load and execute the response so it's trivially easy for ad networks to detect AdNauseam "clicks".
I too am surprised anyone uses Chrome, but I will admit to feeling similarly surprised by how many people use Brave. The company seems so sketchy to me, and I wonder why people who presumably care about web standards are so willing to use Chromium-based anything too.
This "just keep leaning into the outrage machine" is a terrifyingly effective strategy. I realize lobbying groups have had the "we only need to slip past once" strategy forever, but it feels to me like there's a new level of bare-faced autocratic, anti-social-contract power grab going on in a way that wasn't around 20 years ago.
You see it in our political class. Egregious thing? Nah, try this? Oh you're whining now? Here's some more. Look over here. What about this? Moar gnashing! And now this. Oh you don't like it? Clearly you hate children and freedom and family because this is all and only about protecting the children and saving everyone from rapists, Russians and whatever else the zeitgeist is afraid of.
It's on-device AI spyware, really. It collects intelligence about the user, summarizes it and sends it to Google, all paid by the user's electricity bill. Deviously clever.
I mean to be expected of Google. Even their Google Pay sends data to their servers whenever you use it to make payments, effectively also making it so you can't even use it without service. Apple Pay does not, runs the whole thing on-device, and not only is private, but as a result also enables payments entirely offline.
>Apple Pay does not, runs the whole thing on-device
so when I use the physical card that is also on Apple Pay, and Apple Pay tells me I just made a transaction as if I had used Apple Pay, that is all happening on my device? what online service is my phone using to track my account with Visa or my credit card issuer, and it's polling or push?
You get a notification from Apple Pay when you pay with your physical card? Because I only get a notification from my bank's app whenever I use my physical card. Apple Pay notifications only pop up when using Apple Pay itself.
Maybe it sends the payload after coming back online, but for I can for instance leave with only my galaxy watch 6, which doesn't have esim, and I'm able to make payments as long as I connect it with my phone before leaving the house.
I think the comment's saying that they leave the phone at home, and the watch works by itself as long as it was connected to the phone before leaving the house.
I'm willing to bet that it's just for telemetry, but this kind of stuff just lends credence to the crazies claiming Google wants to create some kind of absurd botnet with people's devices.
Surely this would be illegal? Personal data without consent?
Or is it a case of too big too fail.
Seems like running governments' infrastructure pays off. No regulator will dare to impose a fine that could collapse the company. But this is very much needed.
£100bn fine and confiscation of assets in the given country could be a start.
As soon as data starts being exfiltrated to Google (or any Big Tech firm), be sure that governments will demand their copy of the stream too.
The non-disclosure clauses in mass surveillance legislation will ensure the process is opaque to users.
You’ll only find out about it when your door is smashed down and all your devices are seized, because Chrome’s crappy 4GB AI model misinterpreted an innocent photo of your kid in a paddling pool.
Why are they so hungry for data? If it's so intelligent, why does it need to learn by imitation so much?
It feels almost like "AI" can't be built without trillions of hours of human work, yet the ownership of the models and the resulting revenue goes only to those in positions of power to exploit that labor instead of the people doing actual work.
Heck, most of them think the Internet is Chrome.
In the end Google has achieved something that Microsoft couldn't with Internet Explorer, and won the Browser Wars.
Google managed to aggressively advertise their browser by optional install "offer" within Windows installers of software. And they were aiming exactly at all those who couldn't tell the difference between the web browsers and who were conditioned by more experienced family members, friends etc. to just blindly click "Next Next, Finish". Thus, that was an easy win.
Being here when we had choice between Gecko, Presto, Trident and later WebKit/Blink makes me sad how easily the IT world allowed this nearly 100% monoculture to happen. There are still other browsers but chances that we return to variety and choice of rendering engines are low.
Wasn't that the entire point of Windows Recall as well?
Sheesh, I'm starting to notice a pattern...
While consumers remain surprised by affiliate clauses, the QC problem is considerably different from marketing against those recordings.
The linked article veers into Alexa for the ads part and says, roughly, must not be tin foil hats if everyone believes it – then explains the psychology misleading people in most cases. The "I'm noticing a pattern" thing…
Are there sources where Apple either acknowledges or even settles claims of advertising against secret Siri recordings?
(Edit: thinking about it, I think generic terms like "Internet Explorer" should not be trademarkable at all, also I just learned, that also Microsoft "stole" the name and had to pay in a settlement..)
But for it all to go to one place? That's a scary amount of data.
https://youtu.be/Vywf48Dhyns?si=uOwUSAr1F_QSShfj&t=67
Maybe I'm misremembering it. Google is awful. My goodness. I hate Android and can't wait to be rid of it. Graphene and it's buddies can't roll it fast enough
What you should've done is saved what they said so you could post it directly as evidence. If they're collecting all the data they can, you should naturally also have the right to do the same! I've noticed they're increasingly memory-holing a lot of things that, somewhat coincidentally, are inconvenient truths.
Here is the comment: https://news.ycombinator.com/item?id=47930833
Does anyone believe a single big tech company isn’t harvesting data en masse from everyone in duplicitous manners?
Like, the best case scenario is that they don’t just blatantly steal your data and instead use dark patterns or inference to take from you without your knowledge.
And then, thanks to the wonderful opinions of the court, the government has full access to said data since you apparently knowingly agreed to giving it to a third party by virtue of the fact that you engaged in any sort of commerce.
It’s why I’m for forcing content being posted on the internet to be non anonymous and tied to a real identity.
The corporations and government already have and abuse all this data. I want the benefit of knowing when someone says “As an American {incredibly divisive shit}” that it’s actually someone in a foreign country sowing chaos for money or political aims.
It also kind of stinks because not every mistake should be immortalized and recorded forever. Blackmail and all that. It kind of ruins the internet in a different way.
... or just hiding behind a VPN that exits there?
We get all the negatives of anonymity now with foreign actors, domestic actors, and bots flooding the zone with lies, and not of the benefits since all the corporations and governments can trivially pierce that veil.
One uni in my country has been getting bomb threats during the exam period every year for multiple years (a random article says 20 times at least). The whole place gets evacuated each time, nothing is found and nobody is caught.
But people who think they're anonymous because they used a different nick? Yeah, those are idiots, their ISP and the platform knows who they are and anybody can deanonymize them through stylometry.
I don't think surveillance is the solution though. I'd much rather see a network of trust or (second best) anonymous proof of identity.
Any place selling alcohol or cigarettes is able to check if you're 18. They could just as easily check your nationality by looking at your ID and give you a crypto key which can be used to prove that to online platforms without revealing who you are.
But there's no money for big corps in that and most people are not even smart enough to think of it.
Even if NSA captured and logged all internet traffic, they'd still only get a fraction of the information within without breaking all the encryption.
And even if they could break the crypto, the ability would only have any power if/when they acted on it. Which in turns reveals the capability to both normal people and other nation states.
The limitations aren't laws, it's the practical consequences.
Of course, having laws with actual teeth helps.
So they use it when they feel like and not willy nilly? That doesnt change my perspective. They still have the ability to do it at will.
TSMC, maybe?
Perhaps Cory Doctorow will come up with a better term?
If users' behaviors can be pre-labeled on their own devices, processed with AI, and then sent back, it might save a significant amount of internal computing costs.
I do like how Firefox now has a "prevent future AI integrations" checkbox[0], but I just don't believe it anymore (i.e. that it won't magically `uncheck` itself and then enable features I've not requested/authorized).
Which is why I just used an LLM to help me create a local network admin rule to disable the update engine entirely (this SHOULD. NOT. BE. NECESSARY).
[•] <https://www.perplexity.ai/search/b0d3bf5d-7ac7-4d4c-b6c6-32b...>
[0] with a sick darkpattern (for most users to laregly ignore)
That last question I don't even want to ask because the first two doesn't seem clear.
This could be simply fixed by adding the feature, and defaulting it off, and letting people learn about it and enable it.
Nobody gets a promotion for doing that.
it's more like knowledge extraction at this point. younger generations don't build up knowledge any more, everyone else is slowly losing their knowledge by not using it.
Eventually the rug pull comes and knowledge will only be accessible by those who can afford it.
The "business" of so-called "tech" companies is all about data collection
https://www.economist.com/leaders/2017/05/06/the-worlds-most...
Everyone knows that fines paid by companies (instead of the people making the decisions) are considered simply a cost of doing business. A probabilistic tax, if you will.
What finally dawned on me is that given they need more and more data to train bigger and bigger models, at some point the value of using my data for training will exceed the cost of getting caught using it without/against my consent.
There's no escape unless we change the law.
Surveillance capitalism is so stupid.
In the short term, maybe. That's what you tell investors.
In the long term, it's about altering, shaping, and even constructing reality: making a new and canonical truth for humanity where the ruling classes are invisible to us and the machine that tells us our history and bedtime stories and how we feel is in every device we carry, until it is everywhere, and it has always been everywhere, and it will always be everywhere.
"I am altering the deal. Pray I don't alter it any further."
They didn't alter the deal, you just stopped being as naive.
If Chrome starts sending data from the browser back to Google, that's going to be a huge compliance issue. If you work for a company that processes customer data in the browser, you're going to need to ban Chrome.
They don't record data (POSTs etc).
This seems to be what they're hedging against:
> Some AI features in Chrome do not rely on on-device Generative models, and those features may still run even if the on-device Generative AI models are removed.
the on-device ai just offloads some work onto your device
i doubt anyone will be banning chrome, for some reason "it's for ai" is a valid excuse for any amount of sillyness
I haven't ever considered it since and I assume many others are in the same boat.
Chrome has stayed incredibly sketchy from the beginning, when Google gained marketshare by sneaking Chrome into the installer for other products that people intentionally downloaded.
Then Chrome did things like "accidentally" uploading your entire browsing history to Google servers when you signed into Gmail.
Now they have declared war on ad blockers, despite the government warning that ad networks are too big a malware vector to ignore.
Still sketchy because of the lack of consent, but people act like Brave personally stole money from them.
The other "sketchy crypto stuff" is one of the few actually workable alternatives to funding websites with ads on webpages. Again, Brave took in no money (BAT) that you as an admin / creator would have otherwise had, and they keep it in escrow, they don't claim it.
The only other sketchy thing I can remember is pre-installing a deactivated VPN so that people could pay, push a button and it'd work immediately. Plenty of companies do hacks like that for the sake of UX. Dropbox used to hack macOS its Accessibility permission so people wouldn't have to dive into settings to toggle certain things.
The irony is that Firefox has had their own scandals like surreptitiously installing a hidden ad extension that would advertise for Mr. Robot, but somehow Firefox stans have erased that kerfuffle from their collective memory.
That isn't what it did.
Zen has other issues for me on Ubuntu (eating a ton of resources) which is why I usually use FF. But I put Zen in a different category from Brave and definitely better than Chrome.
(Work at Mozilla, but not related to this - this is just public info.)
Safari is probably the only one?
This conclusion doesn't follow your premise. Google has to pay because if Mozilla dies, so does the claim of any real competition on the browser engine market. So everyone agrees Firefox's engine is truly independent. Google pays so Firefox users don't use anything that has to do with Google.
If you think about it, the only real way to not hurt Google is for Firefox to stop existing. Chrome would end up being spun off from Google.
You mean, with reasonable administrations, caring for antitrust laws.
My ISP also already sees the servers I connect to, so DNS gives them less additional information than it does to buttflare.
We're the frogs being boiled, over the last decade. People sounded the alarms, but they were looked at like they had tin foil on their heads. Now, it's clear they were right.
I'm speaking generally, of course. I use Firefox for all my personal stuff, except for those situations where it doesn't work.
What things? Looks like an urban myth.
That said, I can only remember two instances of that slightly inconveniencing me in the past, and both times I was inconvenienced by a Google-run website: once upon a time Google Earth refused to work, and once upon a time I couldn't tweak my Google Meet background. Both are no longer the case.
The biggest counterexample I can think of: WebUSB was critical to Chromebooks supporting external devices, but I can see why Safari might not want it. It has Firefox support at last, though.
Is that really something you need a citation on? You sure seem to have come up with an example of your own.
I can think of just one, USB.
Chrome was built on the premise that web standards matter. Remember IE 6?
Remember AMP?
The Prompt API is part of a real W3C standard: https://www.w3.org/2025/03/webmachinelearning-charter.html
It's not even chaired by Google. It's Intel, believe it or not.
1) Google properties
1a) Chromecast
2) a few web-based games that were really pushing the envelope on web APIs and didn't bother testing on Firefox
3) WebUSB, commonly used for some things like keyboard customization apps
Kaiser's website works mostly on Firefox. Recently I had to print a "letter" and on Firefox it was blank and printed fine with Chrome.
I don't know if it's still this way, but Google Meet didn't work very well in Firefox, so last year I took all my meetings in Chrome.
These are just what I remember. There are a LOT more.
EDIT: on the UPS thing... it happens when I follow links from gmail in Firefox. Sometimes it wouldn't 404, but I'd see a "..." and it would just stay that way.
EDIT2: for a long time (not anymore), sending Kaiser emails was broken. Hitting enter would warp to the bottom on the page and I'd have to scroll back up to finish typing. They're completely redesigned the website recently and that bug is fixed.
They got Chrome when it was bundled with every single installer ever for about a decade (which was so prolific and scummy that Microsoft had to make the "default app" picker system more defensive, because Chrome was abusing it more than microsoft apps were).
When you installed Java, you also got Chrome set as your default browser with no interaction.
Or they one click downloaded it from Google.com because of a giant banner saying "You gotta download chrome"
It's insane to me how rarely people on HN seem to actually know the history of this. Everyone who worked in tech support in the 2010s experienced this.
It was an identical strategy that most spyware and adware used at the time.
2. The adblocking is preconfigured, and non technical users trying to find the right extensions has a very bad history of unintentional malware. Ad block? Adblock plus? Ublock? Ublock origin? This is a great example of what floors a lot of technical folk who would be "why not just install ublock origin" and fail to understand the "why should I when I can just get Brave one and it works"
3. Most people don't use macs
Unfortunately, there is no way to switch back to the stock Chromium look.
The single affiliated link scandal is enough to not touch that project with a ten foot pole.
The web's dependency on Chromium engines is deeply concerning, I agree. I used Firefox for a long time. But at this point, IMO Brave is the most pragmatic choice if you want a browser that's not Google but "just works" with the modern web.
Brave is the Google empire aka chromium.
I use thorium, which also belongs to the empire, so it is not really any different to Brave - but I can use ublock origin still, so that's better. I think we are all in the Google empire here. Praising Brave as alternative, simply does not make a whole lot of sense really.
Firefox is a bit outside of it but it basically got rid of most of its users. When I use firefox, I can not play audio on youtube videos. It works fine with thorium. I tried to convince the firefox developer who said everyone on Linux must use pulseaudio (I don't) but there is no reasoning with Mozilla hackers here. He thinks he knows better than everyone else does. (I could recompile firefox from source, but Mozilla uses mozconfig still: https://www.linuxfromscratch.org/blfs/view/svn/xsoft/firefox... - they are too incompetent to transition into meson or cmake. A failing project, no wonder it lost most of its users. Titanic got nothing on the Firefox team.)
Edit: downvoting a request for insight on something? Mediocre
I don't use their browser but I like their search engine!
Bubble indeed. No one should use Brave.
O no they gave you BAT for visiting websites. Ahhh crypto everyone run!
Also hilarious that I got downvoted on my main comment but nobody was willing to show themselves.
You’re the product, not the browser.
Do I even need to ask?
I did some web searches and see Brave has its own AI thing “Leo” that is intended to preserve privacy. But I don’t think that is on device. Please correct me if I’m wrong.
I use Firefox myself but have family and friends who use various Chromium based browsers.
Thank you.
https://adsm.dev/posts/prompt-api/#which-browsers-support-th...
Packagers might eventually disable that but I tested this behaviour in chromium 148 a few hours ago, and it would download the weights but has trouble running them.
If you have a beefy enough device, then yes this can be done on-device.
[0]: https://developer.chrome.com/docs/ai/prompt-api#hardware-req...
It doesn't block ads. It clicks them first, and then blocks them.
I don't want websites to loose revenue because of my adnlocker. I want them to make extra money because of it!
I'm not affiliated, but would like the project to get more followers. This can stop ads once and for all.
You seem more knowledgeable in how browsers and js work than me. Does the below text still mean that AdNausem is downloading and running all the advertising JS?
Here's what's in the link: >AdNauseam 'clicks' Ads by issuing an HTTP request to the URL to which they lead. In current versions this is done via an XMLHttpRequest (or AJAX request) issued in a background process. This lightweight request signals a 'click' on the server responsible for the Ad, but does so without opening any additional windows or pages on your computer. Further it allows AdNauseam to safely receive and discard the resulting response data, rather than executing it in the browser, thus preventing a range of potential security problems (ransomware, rogue Javascript or Flash code, XSS-attacks, etc.) caused by malfunctioning or malicious Ads.
AdNauseam not loading the response to the "click" request makes it trivially easy to flag as fraudulent, because a real click would load and run the response.
Another reply pointed out that AdNauseam just makes an http request to simulate a "click" and throws away the response. A real click would load and execute the response so it's trivially easy for ad networks to detect AdNauseam "clicks".
The motivation vectors exist here to ensure that, over time, Chrome behaves in ways the end user DOES NOT WANT.
(that they are an ad company (and they don't know what the implication is)).
You see it in our political class. Egregious thing? Nah, try this? Oh you're whining now? Here's some more. Look over here. What about this? Moar gnashing! And now this. Oh you don't like it? Clearly you hate children and freedom and family because this is all and only about protecting the children and saving everyone from rapists, Russians and whatever else the zeitgeist is afraid of.
so when I use the physical card that is also on Apple Pay, and Apple Pay tells me I just made a transaction as if I had used Apple Pay, that is all happening on my device? what online service is my phone using to track my account with Visa or my credit card issuer, and it's polling or push?
I do. Which is sometimes annoying if somebody else is looking at my screen.
https://9to5google.com/2023/12/20/google-wallet-without-inte...
Apple Pay still does send a lot of telemetry about your payments though. https://duti.dev/randoms/wip-location-services/
Or is it a case of too big too fail.
Seems like running governments' infrastructure pays off. No regulator will dare to impose a fine that could collapse the company. But this is very much needed.
£100bn fine and confiscation of assets in the given country could be a start.
I'm not trying to be mean here, but have you been frozen in ice for the last 20 years? This is effectively the tech industry's raison d'etre.
I called that bullshit, guess this article is just proving my point.
The non-disclosure clauses in mass surveillance legislation will ensure the process is opaque to users.
You’ll only find out about it when your door is smashed down and all your devices are seized, because Chrome’s crappy 4GB AI model misinterpreted an innocent photo of your kid in a paddling pool.
It feels almost like "AI" can't be built without trillions of hours of human work, yet the ownership of the models and the resulting revenue goes only to those in positions of power to exploit that labor instead of the people doing actual work.
[1] https://en.wikipedia.org/wiki/Parasitic_computing