Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Bypassing Safari 17's advanced audio fingerprinting protection

fingerprint.com

Post reply on HN
Print view View original

171–180 of 266 posts

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#171

Post by TylerE »

pietro72ohboy wrote: post #163
TylerE wrote: post #141

Earlier quoted context omitted.

Oh expect users to understand this? The same people who have spent the past 40 years getting confused and worked up about cookies?

> Do you have any concept of how many gigawatts per day that would waste? It would still be way less than what large companies are burning on training proprietary LLMs. Do you think the ChatGPT model you use daily was the success at first go? And in that same world, consumers should not even try to protect themselves from GPU fingerprinting? > The same people who have spent the past 40 years getting confused and work…

Maybe reflect on the irony presented by the two halves of your comment?

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#172

Post by Asmod4n »

matheusmoreira wrote: post #166
sweetjuly wrote: post #147

Earlier quoted context omitted.

but nobody wants to use software rendering, that's the whole reason WebGL and WebGPU exist.

They should have thought of that before abusing these things to fingerprint us. Use of the GPU is a privilege and it can be revoked.

You could just fingerprint the cpu then, every cpu behaves differently. Buy any number of the same CPU and you’ll see different aspects in every one of them.

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#173

Post by [deleted] »

Asmod4n wrote: post #172
matheusmoreira wrote: post #166

Earlier quoted context omitted.

They should have thought of that before abusing these things to fingerprint us. Use of the GPU is a privilege and it can be revoked.

You could just fingerprint the cpu then, every cpu behaves differently. Buy any number of the same CPU and you’ll see different aspects in every one of them.

[deleted]

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#174

Post by baybal2 »

sweetjuly wrote: post #147
chii wrote: post #110

Earlier quoted context omitted.

browsers should come with a default software renderer, and behave like the mic and camera where the site will require user permission to release the hardware GPU render path.

but nobody wants to use software rendering, that's the whole reason WebGL and WebGPU exist.

[dead]

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#175

Post by Y_Y »

Asmod4n wrote: post #172
matheusmoreira wrote: post #166

Earlier quoted context omitted.

They should have thought of that before abusing these things to fingerprint us. Use of the GPU is a privilege and it can be revoked.

You could just fingerprint the cpu then, every cpu behaves differently. Buy any number of the same CPU and you’ll see different aspects in every one of them.

This is why high-resolution timers are bad, but a website doesn't have the same level of access to the CPU as it does with something like webGPU.

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#176

Post by lapcat »

simondotau wrote: post #160
lapcat wrote: post #113

Earlier quoted context omitted.

> Why did Safari add this? A lot of Apple's "privacy" features nowadays are marketing. It's privacy theater. What matters is whether they can tell a plausible story to the public, not whether is technically effective.

That's an wild accusation to make without citations. It doesn't even apply in this instance, since Apple's work on fingerprint resistance still results in real privacy improvements even when later shown to be imperfect. It means Apple has to improve what they've already done, not that what they've done so far is mere "marketing" or "theatre".

> That's an wild accusation to make without citations.

Shall I cite my list of CVE? Or perhaps it would be more interesting to cite my list of unfixed 0days.

> It doesn't even apply in this instance, since Apple's work on fingerprint resistance still results in real privacy improvements even when later shown to be imperfect. It means Apple has to improve what they've already done, not that what they've done so far is mere "marketing" or "theatre".

What does it say about Apple engineering that that they keep shipping features with very obvious and/or predictable flaws?

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#177

Post by lapcat »

shuckles wrote: post #121
lapcat wrote: post #113

Earlier quoted context omitted.

> Why did Safari add this? A lot of Apple's "privacy" features nowadays are marketing. It's privacy theater. What matters is whether they can tell a plausible story to the public, not whether is technically effective.

Is iCloud Private Relay theatre? 3rd party cookie blocking? What specific features do you allege exist just to mislead the general public?

> Is iCloud Private Relay theatre?

https://fingerprint.com/blog/ios15-icloud-private-relay-vuln...

> 3rd party cookie blocking?

It's very funny that you should ask this question in response to an article about fingerprinting without cookies.

But yes, there are various workaround to use 1st party cookies or other storage to take the place of 3rd party cookies.

Perhaps the worst is the Safari "Privacy Report", which has always been misleading: https://www.simoahava.com/privacy/intelligent-tracking-preve...

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#178

Post by fh9302 »

lapcat wrote: post #177
shuckles wrote: post #121

Earlier quoted context omitted.

Is iCloud Private Relay theatre? 3rd party cookie blocking? What specific features do you allege exist just to mislead the general public?

> Is iCloud Private Relay theatre? https://fingerprint.com/blog/ios15-icloud-private-relay-vuln... > 3rd party cookie blocking? It's very funny that you should ask this question in response to an article about fingerprinting without cookies. But yes, there are various workaround to use 1st party cookies or other storage to take the place of 3rd party cookies. Perhaps the worst is the Safari "Privacy Report", which ha…

Do you have something more recent than a leak from over 2 years ago that has long been fixed? I'm curious why iCloud Private Relay is theatre at the moment.

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#179

Post by kuschku »

TylerE wrote: post #134
IAmGraydon wrote: post #133

Earlier quoted context omitted.

I’m not following. Why would disabling the GPU use more power? If anything, I would think it would reduce power consumption.

Hardware implantations of things like graphics routines can be hundreds of time more efficient than software implementations running on general purpose CPUs. Try to decode mpeg video at HD resolution in software sometime.

> Try to decode mpeg video at HD resolution in software sometime.

Firefox has only started to ship hardware accelerated video decode a few versions ago. Until very recently, all my video playback was software decoded.

Re: Bypassing Safari 17's advanced audio fingerprinting protection

#180

Post by 15457345234 »

nox101 wrote: post #83
omnicognate wrote: post #50

Earlier quoted context omitted.

Audacity's an awesome piece of software that I've used many times. Never once have I thought "by golly this thing should be a website, and my web browser should be made to expose an audio graph API to every website I visit to that it can be so!"

I'm the opposite. I think website = sanboxed, native = pownage so whenever I can use a website version I often prefer it over a native app. I use photopea all the time now. it's available on every machine, even machines I don't have permission to install software on

And they absolutely love that you, and every other user, sends them every original image you choose to edit

So when you make a meme or whatever and repost it somewhere else, guess what, they know who did that!

Post reply on HN