Felix Rambles

Another step to taking back control

Chrome for Android and privacy

29 March 2019 — Felix Ple┼čoianu

A worrying toot crossed my Mastodon timeline the other day:

I think some people may not know that Google does Man In The Middle shit by default in mobile Chrome? They basically download everything to their servers and then send "optimized" to the client. SSL? HTTPS? Forget it.

There was an opt-out header which website owner could set but they're removing it.

This company doesn't know what privacy is. Or security.

No shit!? Could this be why Chrome takes so damn long to open even the lightest websites, with the phone two feet away from my home router? I went ahead and installed FOSS Browser from F-Droid. Sure enough, every single site I tried in it loads incredibly fast. Incredibly. I can't even see them loading. Not even text-based browsers move like that.

What the hell, Google? I thought you were only doing that with URLs, to provide suggestions, and I had disabled that misfeature. That was a serious privacy breach already. This? This is vile.

Some "helpful" dude in the replies claims that Chrome asks permission to do it on first run. Funny how I never saw that dialog. Oh wait, it's because I got my phone second-hand (in mint condition, mind). And I've seen tech support people tap right through license acceptance and such before handing a device to the buyer. A lot of people will never see the question at all! And most others won't understand it because to them it's just programmer gobbledygook.

Way back in the day, Opera Mobile provided a similar service when phones and networks were a lot less powerful, and actually needed it. Only they explained how the whole thing worked upfront, in plain English, and gave people a big warning: "if you don't trust us, don't use our service". Really, that's what it said.

Funny how I always trusted them. Unlike Google, who just proved themselves even less trustworthy than they already were. And that takes effort nowadays.

Tags: software, technology, website

Comments? Tweet