4 ms·

Is FLoC built in a way where you couldn't just feed websites fake data?

• Ajedi32 6y ago
  You definitely could. Though apparently in incognito mode it's recommended that browsers just throw an exception rather than provide fake data: https://github.com/WICG/floc/blob/dcd4c042fa6a81b048e04a78b184ea4203a75219/security-and-privacy-self-review.md#14-how-do-the-features-in-this-specification-work-in-the-context-of-a-browsers-private-browsing-or-incognito-mode https://github.com/WICG/floc/blob/dcd4c042fa6a81b048e04a78b1...
  • MiddleEndian 6y ago
    Of course the FLoC team would want browsers to throw an exception, since that wouldn't damage the perceived legitimacy of FLoC. But as a user I'd rather feed them false data if possible.
    • nitrogen 6y ago
      There are quite a few ways for a site to distinguish private/incognito from normal browsing, and IMO these differences should be treated as bugs. Indeed, these differences often break sites (including a vaccine registration site) that should work fine. We don't need even more ways for sites to break in private/incognito mode.
      • MiddleEndian 6y ago
        Totally agree, browsers should strive to make it so websites cannot tell if users are browsing privately or not.
  • sanxiyn 6y ago
    Throwing an exception in incognito mode allows websites to detect incognito mode, which is not desirable. Incognito mode should provide fake data.
    • Jonnax 6y ago
      Google have stated that they are not interested in preventing fingerprinting.
• type0 6y ago
  Sure, but you would have to be careful with that though, if you use any Google services they might ban your account with no recourse.
  • 1vuio0pswjnm7 6y ago
    Could that be a blessing in disguise.