Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

Code of conduct, suggestions, and information on forums.debian.net.
Post Reply
Message
Author
User avatar
canci
Global Moderator
Global Moderator
Posts: 2502
Joined: 2006-09-24 11:28
Has thanked: 136 times
Been thanked: 136 times

Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

#1 Post by canci »

Would it be possible for these forums to use an alternative to loading fonts from Google and using Gstatic?

EDIT: It's apparently the theme pycode theme.
Last edited by canci on 2021-11-29 14:29, edited 1 time in total.
Image Stable / Asus VivoBook X421DA / AMD Ryzen 7 3700U / Radeon Vega Mobile Gfx (Picasso) / 8 GB RAM / 512GB NVMe

READ THIS:

* How to Post a Thread Here
* Other Tips and Great Resources

User avatar
ticojohn
Posts: 1284
Joined: 2009-08-29 18:10
Location: Costa Rica
Has thanked: 21 times
Been thanked: 44 times

Re: Forum's Use of Google APIs and Gstatic

#2 Post by ticojohn »

canci wrote: 2021-11-28 19:28 Would it be possible for these forums to use an alternative to loading fonts from Google and using Gstatic?
Are you kidding? IMO using anything Google is like inviting a thief into your home. Why corrupt a perfectly good website? Again, just my opinion.
I am not irrational, I'm just quantum probabilistic.

User avatar
canci
Global Moderator
Global Moderator
Posts: 2502
Joined: 2006-09-24 11:28
Has thanked: 136 times
Been thanked: 136 times

Re: Forum's Use of Google APIs and Gstatic

#3 Post by canci »

Please read my message again. I'm asking for an **alternative to Google APIs and Gstatic**. The website already uses them.
Image Stable / Asus VivoBook X421DA / AMD Ryzen 7 3700U / Radeon Vega Mobile Gfx (Picasso) / 8 GB RAM / 512GB NVMe

READ THIS:

* How to Post a Thread Here
* Other Tips and Great Resources

User avatar
bw123
Posts: 4015
Joined: 2011-05-09 06:02
Has thanked: 1 time
Been thanked: 28 times

Re: Forum's Use of Google APIs and Gstatic

#4 Post by bw123 »

I haven't noticed. uBlock Origin says 1 of 1 domains connected, but 3 items blocked. They are remote fonts, I just checked...

I use Firefox ESR from the repo, it's kind of tricky but I feel it's fairly easy to configure.

Do you have more to add to your post? Privacy on my system is sort of my problem, I try to be up on all the latest variants. You can block about anything you want if you do a little research.
resigned by AI ChatGPT

User avatar
sunrat
Administrator
Administrator
Posts: 6412
Joined: 2006-08-29 09:12
Location: Melbourne, Australia
Has thanked: 116 times
Been thanked: 461 times

Re: Forum's Use of Google APIs and Gstatic

#5 Post by sunrat »

bw123 wrote: 2021-11-29 00:11 I haven't noticed. uBlock Origin says 1 of 1 domains connected, but 3 items blocked. I don't know what the three items are.

I don't have javascript enabled, and I use Firefox ESR from the repo.
I haven't noticed any Google here either. I use FF ESR but don't block javascript. uBlock Origin says 1 of 1 domains connected, 0 items blocked.
I also have PrivacyBadger which usually flags Google as a potential tracker, but it shows nothing here.
“ computer users can be divided into 2 categories:
Those who have lost data
...and those who have not lost data YET ”
Remember to BACKUP!

User avatar
bw123
Posts: 4015
Joined: 2011-05-09 06:02
Has thanked: 1 time
Been thanked: 28 times

Re: Forum's Use of Google APIs and Gstatic

#6 Post by bw123 »

I don't know if it's a big issue, but yeah I guess I'll read up on it. Thanks for the heads up.
https://html.duckduckgo.com/html/?q=web ... mote+fonts
resigned by AI ChatGPT

User avatar
Linuxembourg
Posts: 25
Joined: 2021-11-24 00:41
Has thanked: 4 times
Been thanked: 3 times

Re: Forum's Use of Google APIs and Gstatic

#7 Post by Linuxembourg »

bw123 wrote: 2021-11-29 00:29 I don't know if it's a big issue, but yeah I guess I'll read up on it. Thanks for the heads up.
https://html.duckduckgo.com/html/?q=web ... mote+fonts
I presume you are blocking some sort of cookie notice as there are no items blocked in my Ublock origin on this page.

The forum isn't using google fonts. The font it uses and the CSS it uses are stored on the server.

assets/css/font-awesome.min.css?assets_version=32

User avatar
canci
Global Moderator
Global Moderator
Posts: 2502
Joined: 2006-09-24 11:28
Has thanked: 136 times
Been thanked: 136 times

Re: Forum's Use of Google APIs and Gstatic

#8 Post by canci »

Thanks for the replies.
It's super weird. On my laptop with Debian Bullseye and Firefox ESR, ublock definitely is showing Google Font API and Gstatic. However, on my LineageOS phone, I have Fennec Firefox from F-Droid and no 3rd party stuff is loaded for forums.debian.net
Image Stable / Asus VivoBook X421DA / AMD Ryzen 7 3700U / Radeon Vega Mobile Gfx (Picasso) / 8 GB RAM / 512GB NVMe

READ THIS:

* How to Post a Thread Here
* Other Tips and Great Resources

User avatar
donald
Debian Developer, Site Admin
Debian Developer, Site Admin
Posts: 1046
Joined: 2021-03-30 20:08
Has thanked: 186 times
Been thanked: 240 times

Re: Forum's Use of Google APIs and Gstatic

#9 Post by donald »

@canci We do our best to ensure we remain stand alone, especially with user data and user generated content, the only cookie you should see and accept from here are the one(s) used for login/preferences.

While other Internet "Services" will attempt to monetize and track the behavior here we do our best to shield and keep everything local ... there is a lot going on in the background on this in fact but it is one of those things we don't talk about in public, please be assured we allow no footprints, outside callbacks, or any tools of commerce here. FDN should remain a resource available for all to use, for free, and forever.

However, if you notice such behavior in one of our 3rd party display themes, links, plug-ins, or forum modifications that are pulling from an outside source, please let us know immediately and it will be removed within minutes.

@bw123 @sunrat @Linuxembourg Thank you for the quick qualifying responses.
Typo perfectionish.


"The advice given above is all good, and just because a new message has appeared it does not mean that a problem has arisen, just that a new gremlin hiding in the hardware has been exposed." - FreewheelinFrank

User avatar
canci
Global Moderator
Global Moderator
Posts: 2502
Joined: 2006-09-24 11:28
Has thanked: 136 times
Been thanked: 136 times

Re: Forum's Use of Google APIs and Gstatic

#10 Post by canci »

Thanks. I really appreciate that you're going the extra mile. I use the pycode theme. Is that the issue? Please let me know if I can provide any browser logs.
Image Stable / Asus VivoBook X421DA / AMD Ryzen 7 3700U / Radeon Vega Mobile Gfx (Picasso) / 8 GB RAM / 512GB NVMe

READ THIS:

* How to Post a Thread Here
* Other Tips and Great Resources

User avatar
Linuxembourg
Posts: 25
Joined: 2021-11-24 00:41
Has thanked: 4 times
Been thanked: 3 times

Re: Forum's Use of Google APIs and Gstatic

#11 Post by Linuxembourg »

canci wrote: 2021-11-29 12:22 Thanks. I really appreciate that you're going the extra mile. I use the pycode theme. Is that the issue? Please let me know if I can provide any browser logs.
Pycode theme is what it is I think.

When I got to the demo it blocks google fonts. I have no idea how to set it on the forum! :lol:

https://www.phpbb.com/customise/db/styl ... 4aa5937267

Edit: it also pulls its jquery script from the googleapi. Not sure if that's just the demo though

User avatar
Linuxembourg
Posts: 25
Joined: 2021-11-24 00:41
Has thanked: 4 times
Been thanked: 3 times

Re: Forum's Use of Google APIs and Gstatic

#12 Post by Linuxembourg »

It is indeed the theme. Switch to Allan Subsilver the use of the google is gone.

User avatar
canci
Global Moderator
Global Moderator
Posts: 2502
Joined: 2006-09-24 11:28
Has thanked: 136 times
Been thanked: 136 times

Re: Forum's Use of Google APIs and Gstatic

#13 Post by canci »

Thanks so much.
Image Stable / Asus VivoBook X421DA / AMD Ryzen 7 3700U / Radeon Vega Mobile Gfx (Picasso) / 8 GB RAM / 512GB NVMe

READ THIS:

* How to Post a Thread Here
* Other Tips and Great Resources

User avatar
donald
Debian Developer, Site Admin
Debian Developer, Site Admin
Posts: 1046
Joined: 2021-03-30 20:08
Has thanked: 186 times
Been thanked: 240 times

Re: Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

#14 Post by donald »

I spoke too soon, the majority of the themes use some type of google api for their webfonts, however the only one that explicitly calls for them in its stylesheet is: pycode.

Only 3 people use the style, it would nearly pointless to pull it, but I dont mind.
Typo perfectionish.


"The advice given above is all good, and just because a new message has appeared it does not mean that a problem has arisen, just that a new gremlin hiding in the hardware has been exposed." - FreewheelinFrank

User avatar
canci
Global Moderator
Global Moderator
Posts: 2502
Joined: 2006-09-24 11:28
Has thanked: 136 times
Been thanked: 136 times

Re: Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

#15 Post by canci »

Thanks. I think, even if Google APIs don't do anything, it would morally be outstanding for Debian users to be warned about Google stuff. And at least EU law would require you to list 3rd parties? I think?
Image Stable / Asus VivoBook X421DA / AMD Ryzen 7 3700U / Radeon Vega Mobile Gfx (Picasso) / 8 GB RAM / 512GB NVMe

READ THIS:

* How to Post a Thread Here
* Other Tips and Great Resources

User avatar
donald
Debian Developer, Site Admin
Debian Developer, Site Admin
Posts: 1046
Joined: 2021-03-30 20:08
Has thanked: 186 times
Been thanked: 240 times

Re: Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

#16 Post by donald »

canci wrote: 2021-11-30 18:34 Thanks. I think, even if Google APIs don't do anything, it would morally be outstanding for Debian users to be warned about Google stuff. And at least EU law would require you to list 3rd parties? I think?
I don't disagree with you. We could at best add a little detail in one of the information threads stating we are aware that some of the themes, specifically pycode uses fonts. googleapis .com. for its fonts.

However ALL of the installed themes in someway or another are using wf.src = 'https:// ajax. googleapis. com/ajax/libs/webfont/1.5.18/webfont.js'; even the default prosilver theme that ships with the forum software. No escape from google it seems. :) :(
Typo perfectionish.


"The advice given above is all good, and just because a new message has appeared it does not mean that a problem has arisen, just that a new gremlin hiding in the hardware has been exposed." - FreewheelinFrank

User avatar
canci
Global Moderator
Global Moderator
Posts: 2502
Joined: 2006-09-24 11:28
Has thanked: 136 times
Been thanked: 136 times

Re: Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

#17 Post by canci »

>No escape from google it seems

You could use forum software that isn't GAFAM infested. Or you could block Google APIs on the forum's hosts file.
Image Stable / Asus VivoBook X421DA / AMD Ryzen 7 3700U / Radeon Vega Mobile Gfx (Picasso) / 8 GB RAM / 512GB NVMe

READ THIS:

* How to Post a Thread Here
* Other Tips and Great Resources

User avatar
Linuxembourg
Posts: 25
Joined: 2021-11-24 00:41
Has thanked: 4 times
Been thanked: 3 times

Re: Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

#18 Post by Linuxembourg »

donald wrote: 2021-11-30 19:02 However ALL of the installed themes in someway or another are using wf.src = 'https:// ajax. googleapis. com/ajax/libs/webfont/1.5.18/webfont.js'; even the default prosilver theme that ships with the forum software. No escape from google it seems. :) :(
Where are you seeing that? I cannot see anything that links back to google. The only google reference i can find it commented out with "hsla conversions adapted from https://code.google.com/p/maashaack/sou ... .as?r=5021"

I don't care for privacy reasons I am just intrigued as I cannot see anything about google anywhere when using the default theme.

I am using chromium :lol:
Last edited by donald on 2021-11-30 22:18, edited 1 time in total.
Reason: Fixed weird nested quote

User avatar
donald
Debian Developer, Site Admin
Debian Developer, Site Admin
Posts: 1046
Joined: 2021-03-30 20:08
Has thanked: 186 times
Been thanked: 240 times

Re: Forum's Use of Google APIs and Gstatic [SORT OF SOLVED]

#19 Post by donald »

Linuxembourg wrote: 2021-11-30 20:48
donald wrote: 2021-11-30 19:02 However ALL of the installed themes in someway or another are using wf.src = 'https:// ajax. googleapis. com/ajax/libs/webfont/1.5.18/webfont.js'; even the default prosilver theme that ships with the forum software. No escape from google it seems. :) :(
Where are you seeing that? I cannot see anything that links back to google. The only google reference i can find it commented out with "hsla conversions adapted from https://code.google.com/p/maashaack/sou ... .as?r=5021"

I don't care for privacy reasons I am just intrigued as I cannot see anything about google anywhere when using the default theme.

I am using chromium :lol:
Your quote of mine got mixed with cancis's so I fixed it, left an edit note. ;)


In the templates:

Code: Select all


pycode/theme/stylesheet.css:@import url('https://fonts .googleapis.com/css?family=Open+Sans:400,600');
prosilver/template/simple_header.html:          wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
prosilver/template/overall_header.html:         wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
acidtech/template/overall_header.html:          wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
rockn_roll/template/simple_header.html:         wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
rockn_roll/template/overall_header.html:                wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
Virus_2nd/template/simple_header.html:          wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
Virus_2nd/template/overall_header.html:         wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
AllanStyle-SUBSILVER/template/overall_header.html:              wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
revolution/template/simple_header.html:         wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
revolution/template/overall_header.html:                wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
simplicity/template/simple_header.html:         wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
simplicity/template/overall_header.html:                wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
Virus/template/simple_header.html:              wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
Virus/template/overall_header.html:             wf.src = 'https:// ajax.googleapis.com/ajax/libs/webfont/1.5.18/webfont.js';
I don't do .css and html, so this is admittedly above my pay-grade, but I can see the links.
Typo perfectionish.


"The advice given above is all good, and just because a new message has appeared it does not mean that a problem has arisen, just that a new gremlin hiding in the hardware has been exposed." - FreewheelinFrank

Post Reply