Live data from Hacker News

Sirubo: Packet filtering to block Google and Facebook tracking

peguero.xyz

41–50 of 140 posts

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#41

As someone with more time, I prefer to maintain a massive whitelist for my router. Daily websites receive permanent privileges, incidental websites (such as peguero.xyz) receive temporary privileges (e.g. allow traffic for the next minute), everything else is dropped. I don't have to worry about what chicanery advertising companies are up to when they can't reach me even if they tried. "So the fourth herd of deer too…

Do you use an SSL proxy to catch unwanted requests to CDN's like Cloudflare that would otherwise be allowed?

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#42

This is cool, but not super useful in 2021. Google and Facebook have already moved their tracking technologies beyond frontend network calls due to a rise in browser-level blocking (browser security policies, international regulations, AdBlock, PiHole, etc). The next generation of tracking tech relies on the backend transfer of data between a website and the ad platform, which is invisible to your own network. It als…

> The next generation of tracking tech relies on the backend transfer of data between a website and the ad platform, which is invisible to your own network.

Well if that's true then it should be illegal if it's not already. How do you find which sites are participating in this data grab?

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#43
post #23
post #9

Earlier quoted context omitted.

Shipping logs would be an extreme breach in my mind. But I can BS. Without a cross site unique identifier, the logs would not be usable across different sites... Though... I guess a browser fingerprint could be used as a non-centralized method to generate that unique key...

Anonymous metrics, just the basics to help us keep track of service availability. Oh and a unique device identifier along with some information about your hardware and OS. Well... and your IP and connection times of course. Don't worry though, the marketing websites of the commercial services we use to gather and analyse this data say they're keeping your data very safe and secure! Your privacy means a lot to us.

No no, it’s “we value your privacy” which can be read in a couple of different ways.

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#44
post #28

Earlier quoted context omitted.

>The next generation of tracking tech relies on the backend transfer of data between a website and the ad platform, which is invisible to your own network. But doesn't relying on the publisher's website log statistics instead of the end users' browsers introduce trust and "bad actors" problem? This has been a known "principal-agent" problem[1] for all the decades that 3rd-party ads have existed on the web. I.e. Googl…

The data is sent from the advertiser to the ad platform, not from the publisher to the ad platform. The advertiser is incentivized to send accurate data for both performance optimization and for campaign measurement purposes. Ad fraud is a real problem in the ecosystem, but the server-side APIs are actually more secure. You have a private signed backend endpoint rather than public JS that can be injected anywhere and…

[deleted]

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#45
post #14

I applaud the effort (Boston FTW!). But what can we do to treat the cause, instead of just the symptoms? Stopping big-tech's tracking is cool, but strictly inferior to removing their incentive to track you . How to do that? The ads are valuable for a reason – they work. If they stop working (or rather work less – it's a spectrum), then the collected data becomes just impotent bits filling up some HDD somewhere. I fee…

The tricky bit here is that advertisers don't need their ads to work, they just need to convince their customers they do. Even if there are reasons to question the metrics used to measure effectiveness (see e.g. [1]) this is all meaningless if ad companies still succeed in convincing people they are selling something of value. Which ironically does mean that one way or another advertising companies are good at advert…

This is a good point, and thanks for the links.

Sometimes it does feel like gimmicks all the way down. So much of the "digital market economy" is about generating demand, as opposed to answering demand.

Conservatively, I'm in favour of serving people's existing needs rather than making them anxious of FOMO something new. But I can see how demand-generation is more profitable: if you get to define what "useful" or "desirable" means, you're gold. "Competition is for losers."

But I see the solution as essentially the same: education and mental resilience. To move the needle back to personal agency, do the "malicious packet blocking" internally, rather than ex-post with technology.

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#46

This is cool, but not super useful in 2021. Google and Facebook have already moved their tracking technologies beyond frontend network calls due to a rise in browser-level blocking (browser security policies, international regulations, AdBlock, PiHole, etc). The next generation of tracking tech relies on the backend transfer of data between a website and the ad platform, which is invisible to your own network. It als…

As someone who works in ads, this is a spot-on summation of the current state of tracking. And that's without getting into how machine learning can use seemingly unrelated data points to learn more about you than you could imagine.

At this point if you have even the most basic connections (US bank account, home owner, gps, insurance, a car) the more sophisticated tracking methods can still learn about you and reach you with a decent success rate. It's just that most companies are using crap ad tech.

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#47
post #14

I applaud the effort (Boston FTW!). But what can we do to treat the cause, instead of just the symptoms? Stopping big-tech's tracking is cool, but strictly inferior to removing their incentive to track you . How to do that? The ads are valuable for a reason – they work. If they stop working (or rather work less – it's a spectrum), then the collected data becomes just impotent bits filling up some HDD somewhere. I fee…

> But what can we do to treat the cause, instead of just the symptoms? By affecting the bottom line, increasing expenses and/or decreasing profits. > If they stop working (or rather work less – it's a spectrum) AdNauseam is an interesting attempt in this space - a browser plugin to automatically "click every ad to fight surveillance" (their words). By clicking everything, clicks become less valuable, at least in theo…

you have to poison the well. find a way to scramble enough of the data collected that they can trust none of it.

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#48

This is cool, but not super useful in 2021. Google and Facebook have already moved their tracking technologies beyond frontend network calls due to a rise in browser-level blocking (browser security policies, international regulations, AdBlock, PiHole, etc). The next generation of tracking tech relies on the backend transfer of data between a website and the ad platform, which is invisible to your own network. It als…

As someone who works in ads, this is a spot-on summation of the current state of tracking. And that's without getting into how machine learning can use seemingly unrelated data points to learn more about you than you could imagine. At this point if you have even the most basic connections (US bank account, home owner, gps, insurance, a car) the more sophisticated tracking methods can still learn about you and reach y…

> It's just that most companies are using crap ad tech.

Including Facebook, apparently. About 90% of Instagram ads were irrelevant to me for about two years. Then I mentioned an interest in photography in a private conversation, now 75% of ads are photography-related.

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#49
post #9

Earlier quoted context omitted.

> The next generation of tracking tech relies on the backend transfer of server logs between a website and the ad platform, which is invisible to your own network I've not heard of this, what sites are giving logs to networks?

Shipping logs would be an extreme breach in my mind. But I can BS. Without a cross site unique identifier, the logs would not be usable across different sites... Though... I guess a browser fingerprint could be used as a non-centralized method to generate that unique key...

Ad tech does not need a cross site unique identifier for everyone in order for cross device targeting to work well enough.

There’s other tricks of the trade that make it good enough.

Re: Sirubo: Packet filtering to block Google and Facebook tracking

#50
post #31
post #18

Earlier quoted context omitted.

Honest question: is it worth it? Why would you spend your time on managing that temporary white list? Do you think that time is wasted, or not? (I apologize if my phrasing is a bit rude, but i'm really curious about that, and want to understand your thinking)

I think people like this see it as a 'win' – as if they, John Smith, have beaten the dastardly BigCorp. Whereas, in fact, the most that happens is a Junior Marketing Executive at BigCorp says "Right, that guy falls within the 0.5% of techy customers who make things difficult for us. Ah well, it's only been 80,000 of them, well within our margin for this month."

True - however, IMO, the value is in the awareness of tracking and the knowledge of how to block things as such.

Its better to know how your network operates that you rely on for your daily life than to know nothing about its internals.

My biggest issue as I age is that I FORGET how to do some of the higher level networking that I used to know innately - and I also lose interest in doing such things and become lazy, complacent, and as I forget things, more and more ignorant to it all...

Take PC Gaming as an example, or server rebuilds.

I could build SUN 650s and many many PC based servers with a blindfold on.

I grew up gaming and ran Intel's Game Development Lab for some time and was super knowledgable about all things PC/PCGaming when I had the lastest and best hardware literally delivered to me every day at intel...

Now I don't knwo shit about 'PCMasterRace' and building these days....

Post reply on HN