Printable Version of Topic

Click here to view this topic in its original format

HTMLHelp Forums _ Off Topic _ Website fined by German court for leaking visitor's IP address via Google Fonts

Posted by: Christian J Feb 9 2022, 09:48 PM

https://www.theregister.com/2022/01/31/website_fine_google_fonts_gdpr/

In a way this is excellent news. laugh.gif But surely all sites with third-party script should be fined equally?

Posted by: pandy Feb 9 2022, 10:50 PM

Does that mean Google gets our IP addresses every time a google font is downloaded or was there something special with this site? wacko.gif

Oh well. €100 isn't much. For a company it's nothing.

Posted by: Brian Chandler Feb 10 2022, 01:30 AM

"Excellent news"??? Really? It strikes me as completely insane. No future "EU-compliant" website can include third-party images, then? "Legal mind" might like to know that my opinion of it is already such that it is imossible to lower it.

Posted by: pandy Feb 10 2022, 07:04 AM

Ah, of course! The font is downloaded from google so it's in their access logs. Didn't think. blush.gif

Posted by: Brian Chandler Feb 10 2022, 09:45 AM

QUOTE(pandy @ Feb 10 2022, 09:04 PM) *

Ah, of course! The font is downloaded from google so it's in their access logs. Didn't think. blush.gif


Yes, but as a matter of (computer-science-informed) fact, rather than judicial confusion, they are wrong. You have merely sent them a document including google's address, and they have chosen to operate software that accesses that address.

OTOH, the first thing my website does if they choose to access it, is to send their IP address to ip.info, to find out whether they are in the EU or not. If they really had their way (worldwide), I would first have to show a popup with three choices: (1) EU and insane (i.e. do not want my ip address sent to anyone) in which case I block them for ever (2) EU and reasonable (so I can ask ip.info where they are), and (3) Non-EU (in which case we can proceed sanely anyway.

I find it depressing that the German-speaking countries, which one generally thinks of as rational, have some of the most stupid judges.

Posted by: Christian J Feb 10 2022, 05:40 PM

QUOTE(Brian Chandler @ Feb 10 2022, 03:45 PM) *

You have merely sent them a document including google's address, and they have chosen to operate software that accesses that address.

Doesn't that make the document a Trojan? I have of course patched the vulnerability by using third-party blockers in some of my browsers...



Powered by Invision Power Board (http://www.invisionboard.com)
© Invision Power Services (http://www.invisionpower.com)