Chromium calls home

Chat about just about anything else
User avatar
Drygar
Level 2
Level 2
Posts: 79
Joined: Sat Feb 14, 2015 5:52 pm

Chromium calls home

Postby Drygar » Tue Dec 15, 2015 3:07 am

Hey!

Do you happen to know something new about this security/privacy bug or "feature" :
https://bugs.debian.org/cgi-bin/bugrepo ... bug=792580
https://code.google.com/p/chromium/issu ... ?id=498272

It is about v43 but newer ones were released after that . Is it fixed ? Still in triage as per the site, but I'm still wondering.
Fan of XFCE, MATE, Linux Mint, RedHat, ecryptFS, FSF
Open source enthusiast
No security - No freedom
LM 17.2

His name is Linux >> https://www.youtube.com/watch?v=sOtKZA9ri7M

User avatar
axel668
Level 3
Level 3
Posts: 198
Joined: Wed Jul 08, 2009 11:56 am

Re: Chromium calls home

Postby axel668 » Tue Dec 15, 2015 7:46 am

It's not a bug, it's what Chromium does.
If you want a Google- free version of Chromium you have to use a fork, like e.g. https://iridiumbrowser.de/
It offers better security but also lacks some Google features (e.g. Sync / Signing in to Google)
“A computer lets you make more mistakes faster than any invention in human history - with the possible exceptions of handguns and tequila” (Mitch Ratcliffe)

User avatar
xenopeek
Level 24
Level 24
Posts: 20828
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Chromium calls home

Postby xenopeek » Tue Dec 15, 2015 7:53 am

On your second link read comment #19, #20, and #21.
#19
GCM Channel status syncer only runs when GCM does (meaning starts when there is at least one application/web page/component needing GCM, and stops when last one of these is gone, at which point GCM stops as well.

#20
The gstatic request is probably to https://www.gstatic.com/generate_204 , which is used to check for a working network connection as well as captive portals, if I remember correctly.

#21
#19: Ok, if this is only started on demand, that sounds good to me. Thanks.

GCM is Google Cloud Messaging, see here: https://en.wikipedia.org/wiki/Google_Cloud_Messaging. As described, only when something needs GCM is it loaded. And the call to http://<any Google website>/generate_204 is I think a test to see if Internet is reachable.

In short, it all sounds like functionality. Not "calls home".
Image

rek
Level 1
Level 1
Posts: 34
Joined: Sat Jul 21, 2007 10:49 am
Location: Ohio

Re: Chromium calls home

Postby rek » Tue Dec 15, 2015 9:46 am

I understand that Iridium browser is chromium without the google call home feature. They have downloads for ubuntu listed and I would like someone to detail, how to install in 17.3 mate. REK

rek
Level 1
Level 1
Posts: 34
Joined: Sat Jul 21, 2007 10:49 am
Location: Ohio

Re: Chromium calls home

Postby rek » Tue Dec 15, 2015 10:40 am

I should add, I've copied/pasted the directions for installing in ubuntu 14 and it doesn't download and installation can't find it. Since it is supported by redhat and several other reputable organizations, I really want to try it. Any help would be greatly appreciated. REK

User avatar
xenopeek
Level 24
Level 24
Posts: 20828
Joined: Wed Jul 06, 2011 3:58 am
Location: The Netherlands

Re: Chromium calls home

Postby xenopeek » Tue Dec 15, 2015 11:55 am

Just copy and run (one by one) the 4 commands listed for Ubuntu on their download page (https://iridiumbrowser.de/download) in a terminal. Note that when asked for a password on the terminal, you don't get any visual feedback as you type it.

Iridium vs Chromium: https://github.com/iridium-browser/irid ... d-Chromium. That mentions it disabled the GCM status check.

Iridium does lag behind Chromium. Chromium 47 was released 2 weeks ago but Iridium is still stuck on 46 for Linux and 44 for Windows/OSX it looks like. Iridium isn't free of criticism either: https://news.ycombinator.com/item?id=9482689
Image

User avatar
Drygar
Level 2
Level 2
Posts: 79
Joined: Sat Feb 14, 2015 5:52 pm

Re: Chromium calls home

Postby Drygar » Wed Dec 16, 2015 11:21 am

xenopeek wrote:On your second link read comment #19, #20, and #21.
#19
GCM Channel status syncer only runs when GCM does (meaning starts when there is at least one application/web page/component needing GCM, and stops when last one of these is gone, at which point GCM stops as well.

#20
The gstatic request is probably to https://www.gstatic.com/generate_204 , which is used to check for a working network connection as well as captive portals, if I remember correctly.

#21
#19: Ok, if this is only started on demand, that sounds good to me. Thanks.

GCM is Google Cloud Messaging, see here: https://en.wikipedia.org/wiki/Google_Cloud_Messaging. As described, only when something needs GCM is it loaded. And the call to http://<any Google website>/generate_204 is I think a test to see if Internet is reachable.


OK,

Thanks. But still it calls Google servers which is privacy issue in my opinion. Why should it connect to Google server(s) to check Internet connection ?
I am not aware of other browsers doing the same. Please, correct me if I am wrong.
Fan of XFCE, MATE, Linux Mint, RedHat, ecryptFS, FSF
Open source enthusiast
No security - No freedom
LM 17.2

His name is Linux >> https://www.youtube.com/watch?v=sOtKZA9ri7M

User avatar
Drygar
Level 2
Level 2
Posts: 79
Joined: Sat Feb 14, 2015 5:52 pm

Re: Chromium calls home

Postby Drygar » Wed Dec 16, 2015 11:25 am

axel668 wrote:It's not a bug, it's what Chromium does.
If you want a Google- free version of Chromium you have to use a fork, like e.g. https://iridiumbrowser.de/
It offers better security but also lacks some Google features (e.g. Sync / Signing in to Google)


Thanks!

Isn't Chromium supposed to be free from Google's closed source / proprietary features ? At least free from most ? Just like they removed the binary blob from few months ago .

I made some search/investigation and it seems that Google does release the Chrome source code into Chromium and they seem to claim that it is Debian's fault (they are the maintainers of the package, then Canonical) because they can get the Chromium source code and modify it to their preference and views. Then why didn't Debian did it? Don't Debian maintainers or Canonical's see an issue for a browser package to call home its vendor upon every program start (even though it might be for something considered benign for the majority of people). This "benign" connection is still kind of calling Mars/ calling home, here I am signal sending IP and possible location.
Fan of XFCE, MATE, Linux Mint, RedHat, ecryptFS, FSF
Open source enthusiast
No security - No freedom
LM 17.2

His name is Linux >> https://www.youtube.com/watch?v=sOtKZA9ri7M

User avatar
Drygar
Level 2
Level 2
Posts: 79
Joined: Sat Feb 14, 2015 5:52 pm

Re: Chromium calls home

Postby Drygar » Wed Dec 16, 2015 11:30 am

Re. Iridium, generally I do not install packages from outside the official built-in repositories, PPAs, etc. for security reasons. So I'd prefer to have something from the official Ubuntu or LM repos.

Currently I use Firefox and sometimes Midori, but I am not such a big fan of Firefox as it seems to be slower, sluggish, it seems to crash occasionally especially on HTML5 videos content. Midori is better in speed terms than FF but still it lacks some features.
Fan of XFCE, MATE, Linux Mint, RedHat, ecryptFS, FSF
Open source enthusiast
No security - No freedom
LM 17.2

His name is Linux >> https://www.youtube.com/watch?v=sOtKZA9ri7M


Return to “Open chat”

Who is online

Users browsing this forum: No registered users and 3 guests