3 ms·
If this were to succeed, then not too far out any website a user visits on the Internet can basically reverse engineer to a high degree (and at least approximat
by kerng 6y ago
If this were to succeed, then not too far out any website a user visits on the Internet can basically reverse engineer to a high degree (and at least approximate) the sites a Chrome user was on.
Additionally, combined with just IP address its probably a 99+% precise user identifier.
- jefftk 6y ago> It uses SimHash, so any website a user visits on the Internet can reverse engineer the sites a Chrome user was on. How so? A user's cohort is shared by many other users, and for any individual site you have visited it is very likely there will be another user with an identical cohort who has not visited that site. This means you cannot tell exactly which sites any individual has visited. > combined with just IP address its probably a 99+% precise user identifier. IP address alone is already a massive fingerprinting leak, and needs to be addressed if browsers are to prevent cross-site tracking. Chrome is also working on this: https://github.com/bslassey/ip-blindness https://github.com/bslassey/ip-blindness