Inside Safari 3.2's Anti-Phishing Feature 135
MacWorld is running a piece from MacJournals.com's for-pay publication detailing how the Safari browser's anti-phishing works. The article takes Apple to task for not thinking enough of its users to bother telling them when Safari sends data off to a third party on their behalf. For it seems that Safari uses the same Google-based anti-phishing technology that Firefox has incorporated since version 2.0, but, unlike Mozilla, tells its users nothing about it. "Even when phrased as friendly to Apple as we can manage, the fact remains that after installing Safari 3.2, your computer is by default downloading lots of information from Google and sending information related to sites you visit back to Google — without telling you, without Apple disclosing the methods, and without any privacy statement from Apple."
Hey - Apple didn't promise anything. (Score:3, Insightful)
So far, so good.
Except the Google service is privacy preserving... (Score:5, Insightful)
The google service is designed to minimize privacy leaks. It downloads a coarse-hashcheck database (so Google learns nothing). And then if something hits, it queries a detailed hash.
So unless you get a match on the coarse-hash database, Google learns NOTHING. And google only learns a hash if it matches, which is not very useful, AND google doesn't store this information unless it is a match with their detailed database.
It's Not About Who Sees What (Score:5, Insightful)
The problem is the lack of disclosure.
Slightly OT, but this steams me (Score:5, Insightful)
Remember, the people who designed the Internet (incorrectly) assumed that all computers on the network would be trustworthy, so the rules are pretty loose.
C'mon, Macworld is better than this. Okay, the article is critically reviewing the anti-phishing feature, but the writer seems to have a bone to pick and in order to post an emotionally charged article, takes things one step too far.
The internet was intentionally designed, itself, not to have a centralized authorizing body for each and every PC and server on the planet. It's decentralized on purpose. When a so called journalist writes something like this, I have a problem, because to me it's just pandering to the security freaks. It's a bit off topic, but I also have a problem reading the rest of the article because it makes it hard to trust what the guy has to say. There's probably good facts in the article, and if there's a problem Apple should be criticized, but I can't possibly continue reading when I see something stupid like this.
Re:Data protection act? (Score:5, Insightful)
but over on this side of the pond distributing personally-identifiable information to a third party without explicit consent is a criminal offence.
Sorry I'm less than enthusiastic at your privacy laws considering there's a camera on every corner in your country, watching the citizenry.
Re:It's Not About Who Sees What (Score:5, Insightful)
I'm going to play devil's advocate for a moment and point out that such disclosure is getting harder and harder to comply with. Especially when the web is seen as a collection of cloud services. Should that piracy map viewer posted yesterday disclose to every user that they will connect to Google Maps for map data? Does every website disclose that you are downloading ads from Google or Doubleclick before you visit? Does your favorite web forum notify you that you'll be connecting to Youtube when users post videos?
Those examples convey far more sensitive information than this anti-phishing technology. Yet we don't even bat an eye. In fact, we praise them for such useful extensions to their services. Should web browsers thus play by different rules and be required to notify the user of a non-existent violation of privacy before they do something useful?
I'm not saying that some people don't feel slighted by this. I am saying that the web is evolving in ways that have already made this the norm rather than the exception. If you do feel slighted and wish to be excepted, you're probably going to have to get used to reconfiguring your browser in the same way you install adblock or flashblock.
Re:It's Not About Who Sees What (Score:5, Insightful)
Which would be after you give your information to them. Most other ad agencies don't even go as far as that!
Same thing. You've already connected to their servers and given up your info. Just because there are logos to promote brand recognition there, doesn't mean that you consented to give up your info to a third party or received disclosure that it was going to happen. Google Maps even goes so far as to give you a Terms of Use link *after* you've engaged their services! *gasp!*
I guess the question for you is: Would you feel better if the antiphishing technology had a "powered by Google" logo on it when it found a dangerous site? If so, I'm sure that's something that Apple would be willing to add. It won't do anything to better protect your privacy, though. It will merely give you a warm and fuzzy feeling.
Re:It's Not About Who Sees What (Score:3, Insightful)
I don't "love" a company (Score:5, Insightful)
A lot of you seem to love Apple
I use Safari because it's well integrated with OS X. Firefox isn't, and Camino (which I use by preference) has a couple of bugs that are supposed to be fixed Real Soon Now that make it lock up behind a proxy and don't let me disable Apple's stupid insecurity dialogs.
I also use Safari and Camino because they don't use XUL the way Firefox does. I don't trust the security model for XUL nor the technique Firefox uses for the XUL installer, XPI. And in fact there's been at least one XPI-related vulnerability (quickly patched, but it shows that the class of problems I'm concerned about are real).
This doesn't mean I love Apple, or that I think the folks on the Camino team are cooler than the ones on the Mozilla team. This just means I'm more interested in the best tool for the job than where it comes from.
Re:It's Not About Who Sees What (Score:3, Insightful)
Unless, of course, you have noscript.
Re:It's Not About Who Sees What (Score:5, Insightful)
The problem is the lack of disclosure.
Firefox has disclosed jack shit to me. So where's your problem with that?
I fail to see how this is a big deal (Score:5, Insightful)
I fail to see how this is a big deal. Did you read the article? If so, you would not panic as well.
First of all, everything is transported in hashes. You do not compare the actual URLs that customers visit, only the hashes. Google has no actual links that indicate the banks that you use and the pr0n sites you have browsed. Only hashes.
Also, this is a configurable option. Apple does not force you to use Google. Apple does not force you to use this feature. I think it would be easier if Apple has explained this feature in the release notes to a greater extent and if users had to accept some sort of a license agreement when enabling this feature. Nothing else beyond it.
Re:Hey - Apple didn't promise anything. (Score:5, Insightful)
It's actually much simpler: Apple decides things for you.
Good or evil, what's actually going on here is that Apple has decided that the Best User Experience (TM) will be best served by you surrendering personal information to Google -- that the benefit of privacy is far outweighed by the risk of phishing.
Kind of like how Apple decided that the benefits of being able to install any software you want on a device (iPhone) are far outweighed by the risks of you installing something harmful.
And for what it's worth, when you agree with Steve Jobs on the way things should be done, it's actually pretty amazing. Safari isn't a bad browser.
But when you disagree with Steve Jobs, you have no recourse other than to suck it up or stop buying Apple products.
Re:So why use it? (Score:3, Insightful)
Read TFA -- or at least TFS, FFS.
This article is about an anti-phishing feature in Safari that compromises your privacy.
Your solution is to switch to Firefox, which has the exact same feature enabled by default.
Aside from sheer Firefox fanboyism, what's your point?
Re:It's Not About Who Sees What (Score:2, Insightful)
Firefox+NoScript. Then mark Google Analytics as untrusted to avoid it from telling you it blocked GA. Same thing works for DoubleClick and other advertising/tracking sites.
/etc/hosts file to redirect GA somewhere harmless.
Alternatively, you could add an
Re:It's Not About Who Sees What (Score:3, Insightful)