Hey Apple,

Saying you block trackers but not blocking Google Analytics is like saying you practice safe sex when you cut off the heads of your condoms.

A guy who makes an app that actually blocks trackers

Google Analytics is the most prevalent tracker in the world. During our last crawl, we found it on 64.2% of web sites:


Developers: every time you add Google Analytics to a site, you are helping build the global panopticon. Stop it!

@aral confirmed by HTTPArchive Data, as the most proeminent analytics script. google-analytics.com/analytics represents 0.64% of all the requests of their dataset. almanac.httparchive.org/en/201

@borisschapira @aral

I'd classify Google's font CDN as a tracker also.

It gets:
* Your IP
* Your user agent
* Date & time of visit
* HTTP Referrer (knows what site you visit)

There's little stopping them from correlating your IP with your Google account, if you used the account from your IP and agreed to their services.

Oh, there's also their DNS server.

Read more on my site: danuker.go.ro/how-to-protect-y

#privacy #Google #CDN


@danuker @borisschapira As would I. But unless developers stop adding Google’s trackers to their web sites, we would break most of the web if we blocked that.


· · Web · 2 · 0 · 0

@aral @borisschapira

Using uBlock Origin, I block third party requests by default.

I need to make adjustments for few sites, and IceWeasel's (also Firefox's) Reader View unbreaks articles even with off-domain CSS.

@ldexterldesign Vivaldi phones home and to Google every 24 hours, checking for updates.

Here is an exploration of the requests it sends: spyware.neocities.org/articles

@danuker thanks for referencing this though, I must have missed it in my feed etc.

@SoniEx2 @aral @borisschapira

Decentraleyes barely blocks anything. It seems to work for handpicked resources instead of caching everything on third-party domains.

A user even complains here about fonts and CDNs: git.synz.io/Synzvato/decentral

With uBlock Origin, by default, I block everything except the main server. This breaks many sites, but I can live with that and manage it.

Also, I get rapidly informed of sites that prioritize saving a fraction of bandwidth and/or style over my privacy.

@SoniEx2 @danuker @aral I block everything at the host file level, so that Apps are also prevented to share data with trackers. Blokada on Android, and a script on Mac OS boris.schapira.dev/notes/2018-

@borisschapira @SoniEx2 @aral

Cool! Your approach does cover all apps, but it relies on a big blacklist that needs updating as trackers change domains.

I guess you could also benefit from uBlock Origin and see what 3rd party requests go through unblocked.

@danuker @SoniEx2 @borisschapira And, if you want to, you can use the Better block list with uBlock Origin (but I wouldn’t mix it with others as we go to great pains to try and not break sites while still protecting you/ourselves) :) better.fyi/blockerList.txt

Sign in to participate in the conversation
Aral’s Mastodon

This is my personal Mastodon.