3 ms·

they can still track you based on your account (e.g. Gmail, Hotmail, iCloud) Really? I don't think so. How would that work? If you visit www.somesite.com -

by TekMol 4y ago

they can still track you based on your account (e.g. Gmail, Hotmail, iCloud) Really? I don't think so. How would that work? If you visit www.somesite.com - how would javascript on that site identify you via Gmail?

lucideer 4y ago
What application are you using to visit that site?
pilsetnieks 4y ago
Because Google's, Apple's and Microsoft's accounts specifically are tied to their particular browser and/or OS, not just the websites you're on. So are Firefox accounts but they probably don't have the numbers to engage in any particularly egregious behavior.
- TekMol 4y ago
  What kind of mechanic are you describing? Are you saying the browser is phoning home, telling Google which sites you visit?
  - pilsetnieks 4y ago
    Yes. You can turn it off, though, if you take Google at its word. https://support.google.com/websearch/answer/54068?hl=en&co=GENIE.Platform%3DDesktop https://support.google.com/websearch/answer/54068?hl=en&co=G...
  - chefandy 4y ago
    Well, Chrome obviously does if you’re ‘signed in’ to Google and haven’t turned off their sync settings… which I imagine is the most common end user path, and chrome is the most popular browser. https://www.google.com/chrome/privacy/ https://www.google.com/chrome/privacy/
- nightpool 4y ago
  Are you saying that Google is using their control of the user agent to specifically tie a Google auth cookie to an individual third-party-context web request even when third party cookies are blocked? If so, that would be a major scandal. What evidence do you have that this is the case?
deleted 4y ago
[deleted]
candiodari 4y ago
Okay: 1) you visit to www.somesite.com 2) it serves an ad <iframe src="www.google.com/givemeanad?userforme=waps&hespent=500" 3) your browser does a request to google. It sends: a) your login cookie from your gmail session (or ...) b) the referrer header tells it which site to serve the ad on c) any information the site itself wants to attach to the request 4) Google/Microsoft/Apple store this information and can provide advertisers with your identity, all sites you visit that have their ads, the "flow" (what you visited in what order, e.g. how far did you get in an ordering funnel) and any information those sites share about your account on their site.
- nightpool 4y ago
  Okay, but: a) is blocked by site partitioning, b) doesn't have per-user tracking information, and c) only works (of course) if you've explicitly signed in with Google on that site. I don't think Google supports third-party tracking for ads via that personalization path yet, but plenty of non-Google advertisers do: they take your hashed email address and use that to replace their third-party tracking cookies. This is what the ad community is hailing as their "privacy first" approach that breaks Google's "monopoly"—sending your email address to every single advertiser who they partner with.

by TekMol 4y ago

lucideer 4y ago

What application are you using to visit that site?

pilsetnieks 4y ago

Because Google's, Apple's and Microsoft's accounts specifically are tied to their particular browser and/or OS, not just the websites you're on. So are Firefox accounts but they probably don't have the numbers to engage in any particularly egregious behavior.

TekMol 4y ago
What kind of mechanic are you describing? Are you saying the browser is phoning home, telling Google which sites you visit?
- pilsetnieks 4y ago
  Yes. You can turn it off, though, if you take Google at its word. https://support.google.com/websearch/answer/54068?hl=en&co=GENIE.Platform%3DDesktop https://support.google.com/websearch/answer/54068?hl=en&co=G...
- chefandy 4y ago
  Well, Chrome obviously does if you’re ‘signed in’ to Google and haven’t turned off their sync settings… which I imagine is the most common end user path, and chrome is the most popular browser. https://www.google.com/chrome/privacy/ https://www.google.com/chrome/privacy/
nightpool 4y ago
Are you saying that Google is using their control of the user agent to specifically tie a Google auth cookie to an individual third-party-context web request even when third party cookies are blocked? If so, that would be a major scandal. What evidence do you have that this is the case?

deleted 4y ago

[deleted]

candiodari 4y ago

Okay: 1) you visit to www.somesite.com 2) it serves an ad <iframe src="www.google.com/givemeanad?userforme=waps&hespent=500" 3) your browser does a request to google. It sends: a) your login cookie from your gmail session (or ...) b) the referrer header tells it which site to serve the ad on c) any information the site itself wants to attach to the request 4) Google/Microsoft/Apple store this information and can provide advertisers with your identity, all sites you visit that have their ads, the "flow" (what you visited in what order, e.g. how far did you get in an ordering funnel) and any information those sites share about your account on their site.

nightpool 4y ago
Okay, but: a) is blocked by site partitioning, b) doesn't have per-user tracking information, and c) only works (of course) if you've explicitly signed in with Google on that site. I don't think Google supports third-party tracking for ads via that personalization path yet, but plenty of non-Google advertisers do: they take your hashed email address and use that to replace their third-party tracking cookies. This is what the ad community is hailing as their "privacy first" approach that breaks Google's "monopoly"—sending your email address to every single advertiser who they partner with.