Google’s Cloud Printing… Just Fricking Insane…

April 18, 2010 at 11:24 | Posted in Privacy/Security, thoughts | 6 Comments
Tags: , , , , ,

O.k. people know I’m no fan of Google. In fact I’ve taken great strides to eek out a Google Free life on-line and off. People also know that I think the whole “Cloud” thing is the biggest pile of marketing crap in years, designed to put a nice spin, “oh! its soft! it’s fluffy! it’s free! it’s like a cloud!” on a huge step backwards to a time when people had to pay through the nose for server time to do any computing. “Cloud” is about stripping away your power and autonomy so that the owners of the “cloud” servers can sell it back to you.

This is exactly the case with Google’s cloud printing. They are going to make your life easier.. Or so they say.. and it’ll only cost you.. oh… all your privacy.

The first thing I’d like to clear up is a lot of people are claiming that this will do away with printer drivers and having to install them. If you read the documentation from Google this is plainly not the case, unless you are talking about an (at this point mythical) cloud aware printer. For “legacy” (a.k.a every printer out there today) printers you will not only need to install the drivers you’ll need to install a “proxy” on your computer to make the printer cloud aware. Oh and then you’ll have to leave the computer with the proxy on it powered up and on-line 24/7 if you want to use the print from anywhere anytime functionality.

Still a good deal you say? All that convenient printing and all you had to do was put a Google proxy on your machine and install printer drivers that you would have had to install anyway. Not so, Say I. You have to consider that now everything you print via this “cloud” is flowing through Google’s servers, and you can be 100% sure they will be scanning them and using what they learn to sell ads aimed directly at you. (Oh, and storing the info for who knows how long.)

As witnessed above I have two major problems with this whole idea and one that hasn’t be talked about yet. This takes a local and generally secure activity, printing, and turns it into an on-line and thus potentially insecure activity. It also is completely unnecessary. There already exists a “print from anywhere” over the Internet technology, and Hey, it doesn’t go through Google’s scan everything servers. It’s called “Internet Printing Protocol” and is supported by CUPS out of the box, and readily available on Microsoft machines too. You could set this up almost as easily and have all the joy of a Internet facing printer (including the security concerns). The ONLY reason Google isn’t promoting this is that it doesn’t send the data through their servers.

The third and as yet unmentioned annoyance about all this is that Google is clearly looking to have this technology “embedded” in printers and routers so people will only see the “print from anything anywhere” and not realize the cost in bandwidth, security, and privacy.

“This current requirement is why we are excited about working with the industry to build native support for cloud print services into their printers. We are also hoping some clever folks in the community will build proxies-in-a-box (like routers with print server abilities) so users get all the benefits of the proxy without needing to leave their PC powered on.”

Poor Chrome OS users are going to be bolted into using Google Cloud Printing.

” Google Chrome OS printing

Google Chrome OS will use Google Cloud Print for all printing. There is no print stack and there are no printer drivers on Google Chrome OS!

When users print from a web app that directly integrates with Google Cloud Print, then that works as described earlier with no involvement from Chrome OS. When users are printing a web page that is not making use of Google Cloud Print (such as a boarding pass, movie tickets, a magazine article, etc.), the app that is printing is the Google Chrome browser on Chrome OS. In this case, Google Chrome on Chrome OS is a native app that uses Google Cloud Print and common print dialog. The content to be printed is uploaded to the Google Cloud Print along with the job ticket information and then sent to the printer. More details are in the design document.”

So to sum up. Google Cloud printing:

  • Bad for autonomy (takes something you can do yourself and make you depend on Google for it).
  • Bad for privacy (sends what would other wise have been local data out to the Internet, scans it, stores it, and sends it back again.)
  • Bad for security (sends local data over the internet.Increases your “attack surface” but having the Google print proxy open to the net.).
  • Ignores IPP that offers many of the same features without Google in the middle.

Just plain BAD.

Advertisements

Google Free…

March 17, 2010 at 19:10 | Posted in Life, Privacy/Security, thoughts | 9 Comments
Tags: , , , , ,

This was originally just going to be an “WooHoo!! I’m finally Google free…” post. However when I posted on identi.ca about finally becoming Google free many people wanted to know more.. and several people have responded to me due to my Blogging on such things asking for more info. This has led to a complete re-write of the original post to make it more instructive.

But First…… WooHoo.. I’m Google Free (fireworks here). I finally went ahead and deleted my Google account. (took a while to get the stragglers away from my old gmail account). But that’s it. I’m done. No more Google, Ever.

People that have been following my journey away from Flash, and Google and towards total software freedom (and enhanced privacy) Will be aware that getting Google free is something that has been in the offing for a while now. But now that I’m there I’d like to take a moment. and talk a bit about where the Journey has taken me.

The first thing I’d like to say is that If you can’t live without things like YouTube then this journey (at least to the extent that I’ve gone). Probably isn’t for you. But stick around and read on.. even if you don’t plan to follow in my footsteps you can learn about options that abound that you may have been unaware existed.

One of the loudest questions I have been getting is What did I replace “Google this” or “Google that” with. So, I’m going to make a list and talk about what I like and dislike about them.

Google Search:

I have replaced Google Search with a combination of Scroogle.org and IxQuick.com both return good results. Both offer https: connections to shut my ISP out of my searches. Scroogle is just a Google scraper and as such I may try to move away from it down the road. The further from Google the better. I’d go completely with Ixquick if it weren’t for the fact that they seem to be in love with javascript and that makes their landing page heavier then I like my homepages to be. However I recently tracked down their mobile start page and it is much lighter so I may just start there from now on.

I looked at a few other search options but none were as nice as the two above. Yacy is a very interesting project. A distributed search engine that isn’t owned by anyone. The problem with it was that the results it is currently returning weren’t overly useful for the grand and immense internet. Sadly they may be caught in a catch 22 situation. If more people used Yacy it would end up returning better results but it is hard to get people to donate resources (bandwidth for crawling etc) when they are getting questionable and limited results back. I’ll definitely re-visit Yacy in the future and see how the project is progressing.

Google Reader:

I got quite hooked on Google Reader. I’ll admit it was nice having one central place to go and read my headlnes. It however was not nice feeding Google such huge amounts of info on my interests and my thoughts on those interests. I replaced Google reader with an RSS reader built into my e-mail client claws-mail. It was quite handy having all my RSS headlines right there with my mail. It was also nice because I could set claws-mail up to read them as just text, no images, fancy formatting yelling at me. Just the info I needed and links if I wanted to delve deeper and get more info. I have recently purchased an Nokia N800 and am now using it’s RSS reader to read my morning headlines. Having it right in my hand is a huge plus and being able to read headlines without getting out of my toasty bed is a luxury I quite enjoy.

Google Mail:

This is the service that took me the longest to ditch. Not because I was overly attached to it or anything but because it takes a while to change all the listserves and forums so they now send to the new e-mail and then there was the process of waiting for all the stragglers to update their address books. even with all the time I waited and had the account sitting dormant with an auto responder telling people to use the new account I had a persons call me not 24 hours after closing the account complaining that they couldn’t send me mail Well I guess one last straggles isn’t too bad.

I replaced Google mail with Fastmail. They are paid by me and not by advertising. They offer many added features some of which I have yet to take full advantage of but one of the upshots of the services they add is a reducing of addresses people need to remember for me. Having my instant messenger address being the same as my e-mail address is just wonderful. Being able to have a web address that is extremely similar to the e-mail address I am sure will come in useful even if I haven’t made good use of it yet.

Fastmail is completely affordable. has been rock solid on the reliability front. offers pop3, smtp, ldap, imap, XMPP, and more so accessing things from my mobile device is no problem even thought I have my main laptop sucking down permanent copies of my e-mail via pop3. Their webmail interface is light and easy to navigate. and works well on light computers and without javascript. If you are thinking of moving e-mail providers I’d strongly suggest taking a look at Fastmail.fm

Google Docs:

Never used it. I found OpenOffice years ago and have never looked back. I also am opposed to storing personal info online if I don’t need to and for 99.9% of the documents I work on there is no sane reason for them to live on some anonymous computer, controlled by someone that isn’t me, in a legal jurisdiction that has less privacy rules. Do I sometimes need to have remote access to my documents? Sure. That’s what SSH is for. secure access to my home computer from any wifi hotspot.

Google Groups:

This one I never understood. This is primarily just a wrapper for the Usenet which anyone can access free, and much more privately with a news reader like Pan, or countless others. I read the few news groups that I follow with the usenet functionality of Claws-mail ( have I mentioned that I really like Claws-mail).

Google Talk:

I like to get my Identi.ca updates via Instant message. To that end I had fallen into using Google talk (well a Linux XMPP client hooked up to Google “Google talk” servers) to meet my instant messaging needs. When I switched to fastmail they also offer a federated XMPP server so it was a truly trivial matter to redirect my identi.ca updates to my new address. it was also quite easy to migrate other XMPP buddies. basically I just had to add them back once I had set up the new account in my XMPP client (psi). They’d get a one time message asking to re-authorize me at the new address and once they did that it was like nothing had changed.

Jaiku:

This was one of the first things I ditched, I was actually on Jaiku before Google took an active interest in it but once they did I bailed and bailed fast. One of the first things Google did was introduce a new “privacy policy” which I wrote about at the time because I was horrified by some of the clauses in it. Ditching Jaiku led me to the then very new identi.ca which has turned into a fantastic service, is open source, you can even run your own server is you wanted. The servers are federated so that people on different servers can still follow each other.

Gizmo5:

This is one of the more annoying moves Google has made. I didn’t use the Gizmo5 client as it was closed source but they had an very solid SIP backbone that I used for my occasional VoIP needs. I was quite annoyed when Google bought them out. I am currently transitioning to using VoipStunt. (not the software just the SIP backbone). I’ll let people know how this goes. One of the most annoying things about the whole deal is that Google has tossed Gizmo5 into a real state of limbo and so there is currently no way for me to officially cancel my account. I have completely discontinued using it but It would be nice to be able to terminate the account.

Google maps:

There are many alternatives to this some that were around before google such as mapquest.

Onto the Flash free front.

Several people have enquired about my now Flash free life.

Just to recap for those that have not been following. Due to the closed nature of Flash and it insistence on ignoring privacy settings in both the browser and itself. I decided a while ago to abandon using flash. For a while I was using Gnash an open source Flash software which does not suffer from the same privacy concerns. As time went on and with the release of Flash 10 and most sites now insisting that you have flash 10 or they wont talk to you I decided to totally abandon Flash. So now none of my devices have the ability to render Flash in any way. Perhaps more so then my move away from Google this is a step that may not be for everyone. Flash is currently pervasive on the world wide web and not having it breaks many things. (of course one could argue, and quite successfully, that Flash is outside of the HTML, and W3 standards and thus it is the web developers use of flash that is breaking things not my standards compliant browser.) As far as I am concerned Flash is the biggest bane to the world wide web rivaling even the once dreaded tag.

With the release of HTML5 that supports standards for Video streaming there is no longer a compelling reason for Flash other then using it to evade privacy settings.

So how is Life Flash Free. I think it is best described as, “a lot quieter”. There is instant decrease in blinky advertising noticed more on my mobile device as my main laptop had adblock. It is also a lot easier to focus on the meat of an article as the impulse to skip down and just watch the embedded video sound bite has now been removed. I definitely find I am having more time for other things as I simply can not waste time on Youtube or other Flash based distractions.

Does this mean that I can never watch video on the web until everyone has migrated to a proper (this means you Youtube… use Theora, not H264) implementation of HTML5. Not at all. It does mean that there are more steps involved and so I tend only to take the time for more “important” videos as the common and distracting ones are just not worth the effort. Using sites like tinyogg.com let me watch videos that otherwise wouldn’t work. There are also sites like blip.tv that offer video in other standards and I can often find the video there or an different video on the same subject.

Some things are however just plain broken. (I re-iterate that the brokenness is at the server end which is insisting on using methods outside the Web standards). A quick list of things that are borked without flash

Any Flash based video chat site:
ustream.com
snapyap.com
tokbox.com
chatroulette.com
paltalkexpress.com
etc.

Some webmails that insist on flash though many of those have a fall back to a more standard interface.

Any flash based game sites
popcap.com and many, many others

Most children’s sites are either crippled or totally borked. If your kids have “petz” you wont want to go Flash free just yet. A sad example of this is that if you go to sesamestreet.org without Flash all you get is pictures of Elmo decrying that “F is for Flash” and providing a link to the Flash download site. (a.k.a. now be a good little consumer drone and let us shoehorn you into this box)

Many miscellaneous sites. even some that one wouldn’t expect.

For me. life with out flash is enhanced. I’m less distracted, more productive and no longer is my web browsing polluted with noisy, blinky, irrelevant , crap. For me the reclaiming of my personal freedom and privacy is worth the annoyance of losing a few sites (that are flying well outside the web standards). But then one must bare in mind that I’m the type of guy that participated in the “ascii ribbon campaign” and still sends all his e-mail in plain text. (you know. so anyone can read it no matter what computer or e-mail reader they have). I would still strongly suggest that those without kids try going Flash free. You don’t need to uninstall flash to do so, just disable it in your browser for a couple weeks (I suggest a couple weeks because the first several days will be a painful awakening as you start to see just how pervasive flash has become). I’m guessing that most that can make it past the pain point of the change will see the same benefits that I have.

What flash thinggy do I miss the most.. The Stats graph on wordpress.com. But again I must say, not having it there has shifted my focus away from the numbers and back to the content. So even though I miss the thrill of watching the hits dance up and down. The loss of it has only improved things.

Google’s disingenious DNS offering

December 5, 2009 at 23:00 | Posted in Privacy/Security, Tech, thoughts | Comments Off on Google’s disingenious DNS offering
Tags: , , , ,

I saw an announcement about Goggle offering DNS and wandered over to see what value-added scheme they had come up with. To my surprise at present it is a very vanilla DNS offering. A modern implementation of DNS to be sure but still very vanilla.

Don’t get me wrong. Vanilla is what you want in a DNS. Landing Pages and other “features” are seen as a broken DNS offering by many in the tech field (a good old NX domain will do nicely thank-you).

So, I found myself pondering.. If Google isn’t offering anything new why offer DNS. The answer is simple and obvious. TRACKING.

The moment you log in to a Google property they know who you are and can associate your IP address with your account. Heck if you are the type to click the “Remember me” or “keep me logged-in” buttons you don’t even have to log into a Google property any page with google-analytics can probably read the Google cookie and bang… Google knows your IP address and can tie it to your account.

Now if you go ahead and use their DNS server they can see that the DNS request came from your IP address which they can associate with your account and thus they will know EVERYWHERE you go on the web.

But wait.. there’s more. DNS is used by more than just the browser. They will know what messenger you use and how many hours you ran it for. If you are using a SIP client. What E-mail servers you use. How often you check them. If you are running Skype. What P2P software you use. What software on your system is checking for updates and how often. The list goes on and on.

I have become increasingly leery of Google and their pervasive tracking over the years. For me this is a step to far and shows Google’s real intention to try and track everyone everywhere. (Chromium O/S is just more of this tracking madness).

A while ago I wrote about kicking the Google habit. Now I think it is time for me and anyone that values their privacy to kick Google to the curb. My Gmail account will be set to auto respond to people to inform them of my new Address and after a week or two it will be shut down. I am going to close my Google account permanently and I’m going to file a formal request to have all my info deleted.

I hope that others do the same. It is time to stop the invasion of our lives in the name of profit. I refuse to sell my soul for a few value added treats. You should too.

Kicking the Google Habit

August 25, 2009 at 18:08 | Posted in Life, Privacy/Security | 2 Comments
Tags: , , , ,

With my current move towards using totally free (as in speech) software, joining the FSF (Free Software Foundation), and all the things that are driving these decisions, I find myself questioning my use of Google.

Now, before people write me off as an anti-Google nut-bar, let me clarify my position. I do not think that Google is evil or trying to take over the world. I do think that Google has become a behemoth and despite the wonderful ethos of it’s founders it is now a publicly traded company and that means answerable to the shareholders and thus the bottom line. People shouldn’t fool themselves. Google is profit driven, not peace and goodwill driven. I have watched as their privacy policies on new services have become increasingly invasive. I have seen them use their very successful model of offering “Free” services to get a large user base that they can mine. I have watched as they add ever more services to broaden the scope and breadth of their data mining capabilities.

Due to the above I, like others, have become increasingly concerned about the concentration of data. Consider if you will, what Google can learn about a person using their services:

  • What you Read → Google Books, Google news, Google Reader, Google Scholar, Google Groups
  • Who you talk to → Google Talk, Google Groups, Gmail, Okurt, Google sites, Google Docs
  • What you say,write,create → Blogger.com, YouTube.com, Google Sites, Google Groups, Google Talk
  • Where you spend you money → Google finances, Google checkout, Google product Search.
  • What you are interested in → Google search, Google Alerts, Google Bookmarks, Google WebHistory

As you can see from the list above Google could quickly build a fairly complete dossier on anyone using their services. Add to this the fact that the above list doesn’t take into account Google tracking and analytic services (which operate on thousands of non-Google sites) which I am sure benefit from people that use a Google account and fail to logout before they go browsing the web.

If a person sat and really thought about it they might well end up feeling a little paranoid and they might be right to feel that way.

As for me, I do not think that Google has any vested interest in me other than trying to get advertising in front of me (good luck guys 🙂 ). I have long ago blocked google adsense, google-analytics, and other google tracking and advertising systems that google runs. I use Scroogle or ixQuick for my searches to keep my privacy. On the rare occasions I watched YouTube videos I did so without going to the YouTube site when possible. I was working to protect my privacy.

But then I slipped and got a gmail account just to “check it out” at first. It became my main account over time. (it really is one of the nicest webmails out there). I rationalized that since I used POP access and regularly completely flushed the account, that I wasn’t giving away too much. None of the “Free” webmails are truly free. They all advertise and I suspect that most track and collect information on the people using them.

The problem was that Gmail was my gateway service, to get it I had to set up a Google account and that led to me using other Google services. I soon found myself using Google Reader. I have 2 laptops and it was nice to be able to read my morning headlines from either. Then I found myself using Google talk. Not a lot. Just as the service that my Microblog updates flowed in through… But you can see the trend starting.

Luckily due to this recent push in my life to be “Free” as in speech and due to my normally abnormal (for this day and age) attachment to my privacy, I woke up and realized “Egad”. Here I am just giving my information away. It is truly interesting to see how “just checking out Gmail” had started to turn into giving away all my privacy.

Now, due to who and how I am I’d never have used all of Google’s services. The thought of using Google Docs is anathema to me. I’ve been around since the early days of the Internet so I prefer to actually read the Usenet (Google Groups is mostly just a front-end for the Usenet) directly. And other services just don’t appeal to me. Where they got me, and in truth might have continued to pull me in further is with new services (Gmail was new when I signed up). I’m sure that when Wave comes out the “techie” part of me will want to go and check it out. This time however I think the “sorry, no, that’s my privacy we’re talking about..” side will win.

I have now taken steps to correct my slip. I’m quickly phasing out Gmail. I’ll phase out Google Talk also. I have moved my RSS feeds off of Google reader and into a feed reader on my laptops. I’ve moved my Microblog updates to come in on my Jabber account thus depriving Google of that stream of information. It feels good. I’m well on my way to kicking the Google habit. My goal is to be 100% Google free before the end of the year. I hope to nuke my Google account in less then 3 month. (I have to make sure I didn’t miss changing my e-mail some place so that nothing breaks on me).

I’d like to challenge others to try and do the same. I know that many people will not feel inclined to completely remove Google from their lives.. But take a few moments and think about just how much information you’re streaming through Google. Then think about how you can go about reducing that. Perhaps start by dropping the services that feel like they are giving away too much personal information first and go from there.

I’ll write more on this journey as it evolves, It will be interesting to try to be 100% Google free.

Another great article about why you might want to be Google Free can be found here

Jaiku’s new Lack of “Privacy Policy”

August 28, 2008 at 11:08 | Posted in Privacy/Security | 2 Comments
Tags: , , , , , , ,

With Jaiku moving on to Google servers there has been a new Terms of service and a new Jaiku Privacy Policy issued. You must agree to these to continue using the service. The Terms of Service seem pretty straight forward.. but the new Jaiku privacy policy has some startling and bad terms in it, in particular:

If you use a mobile device client, we collect, in addition to your phone number, your presence information (including location information, such as cell id), your Bluetooth mac address, Bluetooth mac addresses of nearby users, your mobile device status (including whether you are using the device, whether the phone is idle, and the phone’s ring profile), mobile device usage statistics, the duration and description of current/previous/next calendar event, and an indication of whether a call is currently in progress (3G only).

WTF!! If I/you/anyone Posts to Jaiku from a cell phone Google will:

a) Collect location information.

b) Pillage your calendar for current/previous/next events!!!!

c) Invade the privacy of people around you by collecting their Bluetooth mac addresses (remember they know where you are.. so now they know where these other people are also)

d) Collect ringing and call status (which most likely includes the # of the person at the other end of the line (thus invading their privacy))

Remember this isn’t “information that is incidentally sent to us, but we discard”, this is clearly listed as “Information we collect”. That means keep and do with what they want.

I can see no possible justification for raping someones phone like this and the invasion of the privacy of innocent bystanders (who most likely have not agreed to have their information collected). (yes Google that is what you are doing no matter how you try to sugar coat it. If you are finding out where someone is,and when. (third party bluetooth mac) You are collecting information about people not party to your little agreement. The same goes for someone that the Jaiku user may be talking to on the phone.)

I think people should scream at Google about this. In my opinion it’s unjustifiable, it’s wrong, and it’s evil (yes, you heard me Google, IMHO you’re doing serious evil here)

I’m going to use this last paragraph to apologies for perhaps being a little unbalanced. I just find it completely unacceptable that Google would use the technology in a users phone to invade the privacy of bystanders. It is bad enough that they pillage the users phone for as much information as they can get about the users life.

Cuil?

July 28, 2008 at 16:22 | Posted in Tech | Comments Off on Cuil?
Tags: , , , , ,

People are asking will Cuil kill Google. My answer is.. Not any time soon. why? check out these search comparisons:

Google search for Cuil

Google searches Cuil

Google searches Cuil

Cuil search for Cuil

Cuil searches Cuil

Cuil searches Cuil

or

Google searches tr2n

Google searches Tr2n

Google searches Tr2n

Cuil searches tr2n

Cuil searches Tr2n

Cuil searches Tr2n

Even though News articles quote Cuil as claiming that they won’t store searches.. they currently have no Privacy policy on their site. So, until I see a detailed privacy policy on their site I am assuming that they are leaving the door open. Apparently a lot of people have invested a lot of money into Cuil.com and they are going to want to see a return.. So Cuil needs to figure out how it’s going to make money and make it’s investors happy.. and that often means idealistic ideas going out the window.

My overall take, unless Cuil starts offering up more recent, currently relevant, search results they will fall by the wayside.. things change very quickly in the web 2.0 world. Today’s hot search term is dead and forgotten 3 days from now. The wonder of Google is that it keeps up.. if I hear there is new buzz about Tr2n or Cuil.. I can find it on Google. Cuil doesn’t seen to have this going for it (yet) and I suspect that this will frustrate many potential users.

As for the “Not storing searches”, I’ll believe it when I see it in a privacy policy on their site (and when it has been independently verified). I think the lack of a privacy policy on their page when they launch is a clear indication that things are in flux.

—– Update Cuil adds privacy policy.. I’m reading it now (Mon Jul 28 19:55:06 UTC 2008) —-

O.K. congrats to Cuil.. their Privacy policy VERY clearly states that they do not store or track searches or searchers. KUDOS guys.. I still think the relevance of searches needs work tho.

Create a free website or blog at WordPress.com.
Entries and comments feeds.

%d bloggers like this: