41–50 of 111 posts
What is to stop Facebook from assigning an engineering team to act as volunteers so the turnaround time drops to zero?
This followup issue seems to have a more clear writeup, especially for someone like me who is a bit out of the loop when it comes to the PSL: https://github.com/privacycg/private-click-measurement/issue...
While it does have quite a bit of details, this followup issue is clearly written by someone from FB or one of the other AdCos who wants to point the finger back at Apple. The tone and wording used here is rather rich and entitled.
This followup issue seems to have a more clear writeup, especially for someone like me who is a bit out of the loop when it comes to the PSL: https://github.com/privacycg/private-click-measurement/issue...
While it does have quite a bit of details, this followup issue is clearly written by someone from FB or one of the other AdCos who wants to point the finger back at Apple. The tone and wording used here is rather rich and entitled.
I’m just here to point the finger at Facebook, or anyone, for finding this workaround of declaring your legitimate website as a domain suffix just for tracking entropy purposes this is so laughable. like my ford fiesta identifies as an apache attack helicopter
Isn’t the easiest solution here for companies to register their own domain? Why be company.service.tld and not just company.tld? What are these businesses doing for email?
> It is inappropriate for presence or absense in PSL to be used by Facebook as a means to include or reject entries due to the IOS14 change, as PSL is not any form of security screen whatsoever, and the volunteer team maintaining the PSL is receiving the burden of being a sieve for the changes on interaction between those systems, which is taxing our resources. > The ONLY validation performed by PSL volunteers and Gi…
If I was a security researcher, or a blackhat, and I found that bar.example is on the Mozilla PSL, and so Firefox considers foo.bar.example and quux.bar.example to be separate sites - while it isn't on the Apple PSL and so Apple's APIs treat foo.bar.example and quux.bar.example as parts of the same site (or vice versa), then I know I'm going to find weird bugs where Apple and the Firefox browser understand things about these two names differently and I can likely exploit that.
The preference from PSL team members is to do less with this hack over time, to put it behind us. But alas instead it motivates people to turn a hand-wavy notion "You know, a web site" into further reliance on the PSL instead of actually building a robust solution to their problem.
This is particularly inexcusable from Apple because it's not like Apple is hurting for resources. If they actually wanted to solve problems, they could put the work in; so I think we can conclude they weren't much interested in solving the problem, only as usual in ensuring somebody else takes the blame.
Earlier quoted context omitted.
The quotes are entirely appropriate because adding some domain to the PSL makes the subdomains siloed cookie-wise so they can't share cookies and the PSL cannot use cookies anymore. Since they can't share cookies you can't track across even the same domain when added to the PSL. This is a feature needed for sites like Rakuten, Shopify, Alibaba that have multiple merchants under the same domains. Nothing to do with en…
FB seems to believe they are entitled to the ability to track people on iOS. Apple is under no obligation to allow that.
Earlier quoted context omitted.
It's interesting because being added to the PSL reduces your ability to track users. So yeah, I have a bridge to sell you, interested?
> being added to the PSL reduces your ability to track users Not really, in fact it can increase your ability to track users if it's (ab)used in specific ways - see use case #2 and #3 here: https://github.com/privacycg/private-click-measurement/issue...
To be honest Facebook should offer a tracking free version with paid subscription. It is not acceptable that the only way to use Facebook and contact your family is to sacrifice your own and theirs privacy. When are we going to have a regulator step in and tackle this? It doesn't seem that GDPR has helped much, so I think more radical steps are needed. Such tracking that is being done online would be illegal offline…
iPhone users are probably among Facebook's most valuable advertising demographic (ie. lots of disposable income). Apple's decisions to block tracking are hurting them in a big way, and offering a paid subscription probably won't seem attractive to users if Facebook prices it at the full value lost. We've trained people that everything is free. We can't get away from that now that the genie is out of the bottle. Furth…
This is about measuring the impact of advertising while following a standard published by Apple itself and covering the usecase of big marketplaces with sub stores in it.
To be honest Facebook should offer a tracking free version with paid subscription. It is not acceptable that the only way to use Facebook and contact your family is to sacrifice your own and theirs privacy. When are we going to have a regulator step in and tackle this? It doesn't seem that GDPR has helped much, so I think more radical steps are needed. Such tracking that is being done online would be illegal offline…
I don't think people would be willing to pay for tracking-free Facebook more than they pay for Netflix.