om2

42 ms·

211.
by om2 7y ago
Thanks for the info. For dual use technologies we are considering a machine learning approach to identifying fingerprinters (as opposed to legit clients). Also, to my knowledge, screen refresh rate is not currently a top fingerprinting vect
212.
by om2 7y ago
Indeed, the Gtk+ and WPE ports, as well as Sony's Windows port, are the most active after the Apple-maintained ones.
213.
by om2 7y ago
We're working on a list of mitigations that we already have in place. We'd try to keep that updated as we add new ones. The main change here is explaining the conceptual reasoning behind our existing mitigations, and how we will
214.
by om2 7y ago
The limitation on high precision timers isn't due to privacy, it's because of the Spectre/Meltdown family of attacks. We'd like to lift those restrictions, at least conditionally, and are looking into it. I appreciate th
215.
by om2 7y ago
We're willing to do specifically targeted mitigations, but only if we have to. So far, nearly everything we've done has been universal or algorithmic. The one exception I know of was to delete tracking data that had already been
216.
by om2 7y ago
Parties that are motivated to do tracking on the web are very creative. Too creative to list every feature they could use. That said, our goal is to as much as possible remove tracking without removing capabilities for non-tracking use case
217.
by om2 7y ago
There are musical phrases where a smooth glissando is essential to how it sounds. And honestly sometimes the timbre of the specific instrument too. The piano rendition may not get across the feeling the original music creates.
218.
by om2 7y ago
Backpointers can be more than one step away, for example with a circular linked list, or with a directed (not-acyclic) graph. It's harder to see how to enforce these more complex invariants at compile time (but maybe not impossible).
219.
by om2 7y ago
Universal Links will be supported on macOS Catalina. Reference: https://developer.apple.com/videos/play/wwdc2019/717/
220.
by om2 7y ago
Mac Safari doesn't have that kind of protection. Indeed, Firefox has higher global desktop browsing share than Safari. We found ways to add privacy without breaking the web by taking gradual steps and finding clever technical solutions
221.
by om2 7y ago
This is a great explanation of the range of Safari privacy protections. Besides cache, it's also necessary to partition or restrict all other storage mechanisms and communication channels. This includes IndexedDB, Web Storage, Service
222.
by om2 7y ago
Safari too. If it also happens in the new Edge, I will be sad but not surprised.
223.
by om2 7y ago
Safari gives you privacy by default without the need to fiddle with controls.
224.
by om2 7y ago
Yes. Safari had sandboxed separate processes per tab for years (well before Firefox).
225.
by om2 7y ago
They've recently been re-redesigned, particularly the Elements and Network tabs. It would be interesting to hear your thoughts on the latest version.
226.
by om2 7y ago
This new model announced in the OP will do that. Snapshots every 6 months that are taken through the W3C REC track.
227.
by om2 7y ago
The HTML parsing algorithm looked at what browsers do. WHATWG HTML also included other innovations, some of which didn’t entirely work out. Nowadays, new additions are not added so loosely and there is a better defined working mode and gove
228.
by om2 7y ago
This number doesn't necessarily have to remain 6 bits but note that if it got up to 32 bits it would be enough to contain a unique user ID (or even a unique ID for a specific click) which removes all privacy benefits.
229.
by om2 7y ago
We've started thinking about how to prevent conversion fraud. I think conversion fraud is possible even with current tracking pixel based conversion using a headless browser that scrapes the DOM of the purchase page. I also suspect fak
230.
by om2 7y ago
We've done things to make it harder fingerprint Safari users. It might still work sometimes but will be less reliable.
231.
by om2 7y ago
We (WebKit team) know of major ad platforms that use cookies as their preferred mechanism to track clicks, in part so that a tracking pixel can work without requiring the merchant landing and conversion pages to include script. We are also
232.
by om2 7y ago
I don't see how this proposal has anything to do with an Apple walled garden? Nothing here special cases or favors Apple. We welcome issues on possible limits of the privacy protections though.
233.
by om2 7y ago
Ad blockers are a useful technology for users who opt in. For Safari, we aim to have on-by-default protections that provide privacy protection while still supporting ad-based business models. We see Firefox and Edge moving in this direction
234.
by om2 7y ago
This proposal allows attribution when the user clicks and then makes a purchase up to a week later, perhaps even from a separate visit. (But still trying to avoid personally identifying info).
235.
by om2 7y ago
Unfortunately websites break if you stop sending it or dramatically change it. Most browsers can't afford the risk of a dramatic change here.
236.
by om2 7y ago
There's a lot of fingerprintable info in HTTP headers other than User-Agent and in parts of the User-Agent string other than the browser/OS versions.
237.
by om2 7y ago
Safari's Intelligent Tracking Prevention effectively blocks third-party cookies, at least for resources that are used in a third-party context on multiple sites. This google Chrome proposal also does it, but provides a dead simple work
238.
by om2 7y ago
How is it up to the website? Can they put a URL in their signed package for the browser to display that won't load the same content if you copy it and paste it into a new location field?
239.
by om2 7y ago
Will this load an uncached copy of the AMP version, or the canonical URL as specified by `<link rel=canonical>`?
240.
by om2 7y ago
It will be interesting to see if Microsoft ever diverges from the web platform functionality exposed by Chrome. My prediction is that either they never do it, or they eventually do it and are forced to fork. Chromium is not as open to varia

More ›