Damn. The "iPhone last setup or erased on ..." is really nasty. What can a user really do about that? I feel like this should be fudged somehow by the OS.
Seems like in general the iPhone was not designed to avoid fingerprinting from installed apps. Only protection would be avoid installing apps and use the web browser when possible.
Loupe – A iOS app that raises awareness about what native apps can see
21–30 of 263 posts
Re: Loupe – A iOS app that raises awareness about what native apps can see
#22Volume creation date is pretty egregious. I don't see any reason that and Pasteboard changeCount should be so granular. The "Installed Apps Probe" leak also surprised me. It is better than the current state of Android, though.
And nothing stops from using reset it every day.
Re: Loupe – A iOS app that raises awareness about what native apps can see
#23Earlier quoted context omitted.
Seems like in general the iPhone was not designed to avoid fingerprinting from installed apps. Only protection would be avoid installing apps and use the web browser when possible.
The intended “protection” is the ToS, which requires apps to disclose what they are tracking and whether they perform cross-premise tracking.
Re: Loupe – A iOS app that raises awareness about what native apps can see
#24Re: Loupe – A iOS app that raises awareness about what native apps can see
#25Earlier quoted context omitted.
Seems like in general the iPhone was not designed to avoid fingerprinting from installed apps. Only protection would be avoid installing apps and use the web browser when possible.
The intended “protection” is the ToS, which requires apps to disclose what they are tracking and whether they perform cross-premise tracking.
They give that one completely up to businesses, then, to devs. They also thought they should let an app maker prohibit screen recording, which might promote development since it protects revenue of e.g. subtitling apps as one example. But end result is you even end up with a black screen when recording the iPhone Mirroring app from a Mac.
Apple owes us a better balance here. iCloud Private Relay for all apps (why only Safari?! and Mail and HTTP) as a start, and plugging some of the privacy holes Loupe exposes. They don’t want us abusing free trials I suppose.
Re: Loupe – A iOS app that raises awareness about what native apps can see
#26Apple should be ashamed that they aren't putting effort to randomize these fingerprints....
Re: Loupe – A iOS app that raises awareness about what native apps can see
#27Damn. The "iPhone last setup or erased on ..." is really nasty. What can a user really do about that? I feel like this should be fudged somehow by the OS.
Seems like in general the iPhone was not designed to avoid fingerprinting from installed apps. Only protection would be avoid installing apps and use the web browser when possible.
Re: Loupe – A iOS app that raises awareness about what native apps can see
#28Earlier quoted context omitted.
Is the threat model tracking across multiple apps to correlate what you're doing? In that case, a single app wouldn't show you the fudging.
```Based on a binomial/Poisson distribution and a baseline of 21 million U.S. device sales per release, a fingerprint relying on "seconds since setup" fails to uniquely identify individuals. In the high-density Early Adopter phase, you will share your exact setup second with an average of 1.01 other people (a total matching pool of ~2 people). Six months into the cycle, you will still share that second with an averag…
Re: Loupe – A iOS app that raises awareness about what native apps can see
#29This is why I avoid installing apps and don’t have a lot of them.
Re: Loupe – A iOS app that raises awareness about what native apps can see
#30Volume creation date is pretty egregious. I don't see any reason that and Pasteboard changeCount should be so granular. The "Installed Apps Probe" leak also surprised me. It is better than the current state of Android, though.
Pasteboard counter exists to help apps to not ask again about the same item in the buffer. And nothing stops from using reset it every day.
Any way to reset it as an end user? (Not enough awareness of the issue for search engines to find much.)