Live data from Hacker News

iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

github.com

11–20 of 111 posts

Re: iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

#11
post #2

> It is inappropriate for presence or absense in PSL to be used by Facebook as a means to include or reject entries due to the IOS14 change, as PSL is not any form of security screen whatsoever, and the volunteer team maintaining the PSL is receiving the burden of being a sieve for the changes on interaction between those systems, which is taxing our resources. > The ONLY validation performed by PSL volunteers and Gi…

Apple is the company that declared this the canonical Public Suffix List. Facebook is just directing their customers towards it. "If you need to be considered a public suffix for Apple's new policy, you'll need to send your pull request to this repo."

Re: iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

#12
Summary: Apple introduced PCM [1], and to keep people from using it for cross-site tracking it limits the bits available to a single site (as defined by the PSL). If shop-a.retail.example and shop-b.retail.example are completely separate, and don't want to compete for bits, Apple will still treat them as a single site unless retail.example is on the PSL. Being on the PSL is a big change (partitioned cookies, etc) but could be appropriate for different shops.

FB issued guidance suggesting domains like retail.example consider getting themselves added to the PSL, and now the PSL (a volunteer project) is getting a lot of requests. The PSL project has put these requests on hold, and asked FB and Apple to work this out. FB is talking to Apple in https://github.com/privacycg/private-click-measurement/issue...

[1] https://webkit.org/blog/11529/introducing-private-click-meas...

Re: iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

#14
PSL: Public Suffix List

https://publicsuffix.org/

> A "public suffix" is one under which Internet users can (or historically could) directly register names. Some examples of public suffixes are .com, .co.uk and pvt.k12.ma.us. The Public Suffix List is a list of all known public suffixes.

> The Public Suffix List is an initiative of Mozilla, but is maintained as a community resource.

Re: iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

#15
post #9

This followup issue seems to have a more clear writeup, especially for someone like me who is a bit out of the loop when it comes to the PSL: https://github.com/privacycg/private-click-measurement/issue...

While it does have quite a bit of details, this followup issue is clearly written by someone from FB or one of the other AdCos who wants to point the finger back at Apple. The tone and wording used here is rather rich and entitled.

you're not joking: https://github.com/privacycg/private-click-measurement/issue...

>Who will vet such a list continuously at a global scale? >Apple should. >Apple created this issue in the first place. The need for multi-tenant websites to add themselves to the PSL exists only because of the PCM design decision to limit measurement to registrable domains. The urgency exists because Apple's planned ATT enforcement.

Re: iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

#17
post #9

This followup issue seems to have a more clear writeup, especially for someone like me who is a bit out of the loop when it comes to the PSL: https://github.com/privacycg/private-click-measurement/issue...

While it does have quite a bit of details, this followup issue is clearly written by someone from FB or one of the other AdCos who wants to point the finger back at Apple. The tone and wording used here is rather rich and entitled.

They seem to think that people can’t really “opt out” of “tracking” (scare quotes theirs). Talk about entitled.

Re: iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

#18
Seems like the right move from a volunteer run project, what will the future will hold though? Artificial scarcity is always a problem.

On another note, for just 20k$ I can offer you exclusive use of the xxgfzrf.dinglebop.me Public Suffix so that you can keep tracking your users. Please reach out to sales@example.com if you are interested.

Re: iOS 14 and Facebook Pixel causing increase in PSL inclusion requests

#19
post #17
post #9

Earlier quoted context omitted.

While it does have quite a bit of details, this followup issue is clearly written by someone from FB or one of the other AdCos who wants to point the finger back at Apple. The tone and wording used here is rather rich and entitled.

They seem to think that people can’t really “opt out” of “tracking” (scare quotes theirs). Talk about entitled.

The quotes are entirely appropriate because adding some domain to the PSL makes the subdomains siloed cookie-wise so they can't share cookies and the PSL cannot use cookies anymore. Since they can't share cookies you can't track across even the same domain when added to the PSL.

This is a feature needed for sites like Rakuten, Shopify, Alibaba that have multiple merchants under the same domains.

Nothing to do with entitlement.

Post reply on HN