Information Leaks via Safari’s Intelligent Tracking Prevention
1–10 of 37 posts
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#2Reposting from the other [1] thread: Basically Safari keeps track of which domains are being requested in a 3rd party context (i.e. I load example.com in my browser and the page loads the facebook sdk - Safari increments a counter for facebook by 1). Once a given domain reaches 3 hits, Safari will strip cookies and some other data in 3rd party requests to that domain. The problem is that advertisers can use this to f…
So unlike yesterday's Apple news this is a subtle flaw, not a decision they made
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#3Reposting from the other [1] thread:
Basically Safari keeps track of which domains are being requested in a 3rd party context (i.e. I load example.com in my browser and the page loads the facebook sdk - Safari increments a counter for facebook by 1). Once a given domain reaches 3 hits, Safari will strip cookies and some other data in 3rd party requests to that domain.
The problem is that advertisers can use this to fingerprint users: register arbitrary domains, make 3rd party requests to them, and detect whether or not that request is having data stripped. Each domain is an additional "bit" of data.
This is similar to "HSTS Cookies" [2] and also to issues with Chrome's XSS auditor, which is why it was removed [3].
[1]: https://news.ycombinator.com/item?id=22120136
[2]: https://nakedsecurity.sophos.com/2015/02/02/anatomy-of-a-bro....
[3]: https://twitter.com/justinschuh/status/1220021377064849410
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#4Wow. I understand ITP's high level design, but didn't know it's implementation is so naive. Maintaining global database with a few rules which can be easily reverse engineered and giving its access to any documents? How did it go through the internal review process? Does Apple have any privacy/security review process for its major products?
I understand that privacy engineering is very hard and sometime can get not very obvious with implicit statistical dependency chains, but this kind of direct problem could (or should?) be caught in an early stage of design. Anyway, ITP is all about privacy and deserves attentions from dedicated privacy engineers.
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#5There is a fundamental difficulty when trying to implement privacy: A limit on the disclosure of information is itself a disclosure of information.
A good privacy design needs to confront this issue directly. Sometimes there's nothing to be done. I think in some cases it's mathematically unsolvable (cf. Cynthia Dwork's paper on Differential Privacy). But an explicit consideration can at least surface some trade-offs. The more fine-grained and selective your redactions, the more information they reveal.
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#6Conversely, Chrome is heading in the right direction:
>Chrome plans to more aggressively restrict fingerprinting across the web. One way in which we’ll be doing this is reducing the ways in which browsers can be passively fingerprinted, so that we can detect and intervene against active fingerprinting efforts as they happen. [0]
This will include things like restricting the volume of Browser API checks allowed, etc, to reduce the number of bits that can be used in a fingerprint.
[0] https://blog.chromium.org/2019/05/improving-privacy-and-secu...
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#7I’ve been following privacy issues and technology for a while, but haven’t come across a foundational discussion of (a) the merits of and (b) technical implementations of different approaches to avoid fingerprinting:
“hiding” vs “blending in”(making me look identical to countless others - maybe even randomizing who I look like in a smart way).
I wonder if any subject area experts reading this thread would be willing to share a summary of their knowledge and thoughts here.
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#8There is a fundamental difficulty when trying to implement privacy: A limit on the disclosure of information is itself a disclosure of information. A good privacy design needs to confront this issue directly. Sometimes there's nothing to be done. I think in some cases it's mathematically unsolvable (cf. Cynthia Dwork's paper on Differential Privacy). But an explicit consideration can at least surface some trade-offs.…
It makes me think of password requirements. Isn't it bad to earmark a password as requiring certain things rather than to let the possibilities be completely open?
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#9Conversely, Chrome is heading in the right direction: >Chrome plans to more aggressively restrict fingerprinting across the web. One way in which we’ll be doing this is reducing the ways in which browsers can be passively fingerprinted, so that we can detect and intervene against active fingerprinting efforts as they happen. [0] This will include things like restricting the volume of Browser API checks allowed, etc,…
Chrome is just trying to start catching up to where Safari and Firefox are.
Re: Information Leaks via Safari’s Intelligent Tracking Prevention
#10Reposting from the other [1] thread: Basically Safari keeps track of which domains are being requested in a 3rd party context (i.e. I load example.com in my browser and the page loads the facebook sdk - Safari increments a counter for facebook by 1). Once a given domain reaches 3 hits, Safari will strip cookies and some other data in 3rd party requests to that domain. The problem is that advertisers can use this to f…
So unlike yesterday's Apple news this is a subtle flaw, not a decision they made
Seems like it.