3 ms·
> Apple could eliminate most ad fraud that pretends to be its platforms, by generating tokens from its secure enclave for advertisers, and providing a REST API
by jefftk 4y ago
> Apple could eliminate most ad fraud that pretends to be its platforms, by generating tokens from its secure enclave for advertisers, and providing a REST API to validate the token is from a live device.
What stops someone from buying an Apple device and generating a zillion tokens?
- syntheticcorp 4y agoRate limiting access to the enclave? Somewhat related, I fear this is where we are going to end up with secure attestation, limiting web access to approved devices.
- jefftk 4y agoI wonder if there are ways to trick the enclave into thinking time is passing faster... Pegging the rate limiter to 100% on an old iphone is also going still give you a lot of tokens very cheaply.
- lossolo 4y ago> I wonder if there are ways to trick the enclave into thinking time is passing faster... Most of serious implementations have their own clocks or incremented counters, which makes tricking them very hard even for a state actor.