4 ms·

It is ironic that every new preference meant to enhance privacy only adds more bits of information by which to fingerprint you. But maybe fingerprinting is una

by nwah1 6y ago

It is ironic that every new preference meant to enhance privacy only adds more bits of information by which to fingerprint you. But maybe fingerprinting is unavoidable. As far as I understand, to avoid fingerprinting, you would need to not have any browser cache at all.

godelski 6y ago
If DNT is a setting and respected by the website, how is this fingerprinting? My understanding is fingerprinting you need multiple metrics to compare to ensure someone is unique and thus you couldn't fingerprint purely based on a single setting (DNT) alone. (Obviously if it is not respected it becomes one more metric to add to enable better fingerprinting)
- nitrogen 6y ago
  Check out EFF's Panopticlick demo. You basically answered your own question in your final parenthetical.
  - godelski 6y ago
    But part of this article is about giving DNT some teeth. The parenthetical statement was to show I understand that without the legal teeth it is another metric. But by ignoring the legal part you're ignoring the entire point of the post and my comment.
capableweb 6y ago
Yeah, strange that they don't focus on the legalities of the already existing dnt header, and instead added a new "Sec-GPC" header. https://globalprivacycontrol.github.io/gpc-spec/#the-sec-gpc-header-field-for-http-requests https://globalprivacycontrol.github.io/gpc-spec/#the-sec-gpc...
contingencies 6y ago
It's far from just the browser cache. Consider things like network location, download speed, interaction path, browser parsing edge cases, script enabled, privacy add-ons enabled, etc...
warrenq 6y ago
Duck Duck Go exists because they figured out to cleverly target and market to a specific demographic using the right trigger words. This is no different from Gold Peddlers selling to Doomer-Preppers pointing that Government is the Enemy while nicely pocketing the profits from the gullibility of their target audience
OpticalWindows 6y ago
At last we see the end of the funnel. Both sides of an argument push 'progress' for a desired result.

by nwah1 6y ago

godelski 6y ago

If DNT is a setting and respected by the website, how is this fingerprinting? My understanding is fingerprinting you need multiple metrics to compare to ensure someone is unique and thus you couldn't fingerprint purely based on a single setting (DNT) alone. (Obviously if it is not respected it becomes one more metric to add to enable better fingerprinting)

nitrogen 6y ago
Check out EFF's Panopticlick demo. You basically answered your own question in your final parenthetical.
- godelski 6y ago
  But part of this article is about giving DNT some teeth. The parenthetical statement was to show I understand that without the legal teeth it is another metric. But by ignoring the legal part you're ignoring the entire point of the post and my comment.

capableweb 6y ago

Yeah, strange that they don't focus on the legalities of the already existing dnt header, and instead added a new "Sec-GPC" header. https://globalprivacycontrol.github.io/gpc-spec/#the-sec-gpc-header-field-for-http-requests https://globalprivacycontrol.github.io/gpc-spec/#the-sec-gpc...

contingencies 6y ago

It's far from just the browser cache. Consider things like network location, download speed, interaction path, browser parsing edge cases, script enabled, privacy add-ons enabled, etc...

warrenq 6y ago

Duck Duck Go exists because they figured out to cleverly target and market to a specific demographic using the right trigger words. This is no different from Gold Peddlers selling to Doomer-Preppers pointing that Government is the Enemy while nicely pocketing the profits from the gullibility of their target audience

OpticalWindows 6y ago

At last we see the end of the funnel. Both sides of an argument push 'progress' for a desired result.