Live data from Hacker News

Apple adds a tracker blocker to desktop Safari

techcrunch.com

51–60 of 301 posts

Re: Apple adds a tracker blocker to desktop Safari

#51
post #27

The big question to me is whether it's enabled by default, and whether it blocks requests to Google Analytics. If so, that's an interesting shot across the bow.

You don't need to block Google Analytics to make it more private. You just need to make the user appear to a new user to every site.

So Google may lose data because then they can't track you all over the web, but the websites don't because they still see you as one user.

Re: Apple adds a tracker blocker to desktop Safari

#52

Thumbs up for Apple distinguishing themselves by their pro-privacy stance, as opposed to MS, who don't have anything to win by Win10's excessive "telemetry" IMHO.

You're joking right? Factory reset your iPhone sometime and note all of the prompts to share and access your data. The only difference between MS and Apple is that Microsoft made the mistake of presenting everything all on one screen instead of breaking it up over 5 or 10 prompts as you use the device.

Re: Apple adds a tracker blocker to desktop Safari

#53
post #9

Earlier quoted context omitted.

> Does this mean browser fingerprint is somehow scrambled before it is sent to the tracker instead of blocking? It might be homogenized instead of scrambled. Every iOS device could be given (barring IP etc.) the same fingerprint.

I don't think that's even theoretically possible. How do you block JS font enumeration without crippling the browser font API?

Offer the same basic set to every site. Why does a website need to know the fonts you've installed?

Re: Apple adds a tracker blocker to desktop Safari

#54
post #29

This is great, but unfortunately, until Apple ups its browser security game, Safari is a non-starter. On macOS, switching from any other browser to Chrome is in the top 3 things you can do to materially improve your security in ways that actually matter in the real world.

What are the other two (for macOS)?

"Use a password manager, enable MFA" unless I miss my guess.

Re: Apple adds a tracker blocker to desktop Safari

#55
post #9

Earlier quoted context omitted.

> Does this mean browser fingerprint is somehow scrambled before it is sent to the tracker instead of blocking? It might be homogenized instead of scrambled. Every iOS device could be given (barring IP etc.) the same fingerprint.

I don't think that's even theoretically possible. How do you block JS font enumeration without crippling the browser font API?

You can't block font enumeration without crippling the entire CSSOM.

But that doesn't affect iOS, because you can't install fonts on iOS.

Re: Apple adds a tracker blocker to desktop Safari

#56
post #27

The big question to me is whether it's enabled by default, and whether it blocks requests to Google Analytics. If so, that's an interesting shot across the bow.

Does Analytics do some tracking by default? Or only if you enable the advanced demographics options, which enable DoubleClick?

Re: Apple adds a tracker blocker to desktop Safari

#57
post #9

Earlier quoted context omitted.

> Does this mean browser fingerprint is somehow scrambled before it is sent to the tracker instead of blocking? It might be homogenized instead of scrambled. Every iOS device could be given (barring IP etc.) the same fingerprint.

I don't think that's even theoretically possible. How do you block JS font enumeration without crippling the browser font API?

Simple way would be tainting any JS/DOM data that interacts with the font metrics API (or one of a number of other similar APIs) and then not allowing tainted data to be used as parameters in network requests.

Re: Apple adds a tracker blocker to desktop Safari

#58

Thumbs up for Apple distinguishing themselves by their pro-privacy stance, as opposed to MS, who don't have anything to win by Win10's excessive "telemetry" IMHO.

You're joking right? Factory reset your iPhone sometime and note all of the prompts to share and access your data. The only difference between MS and Apple is that Microsoft made the mistake of presenting everything all on one screen instead of breaking it up over 5 or 10 prompts as you use the device.

There's a huge difference between being asked if it's ok to share your data and just sharing it by default. Additionally, Apple doesn't offer any kind of way for anyone but you to decrypt your data.

Re: Apple adds a tracker blocker to desktop Safari

#59
post #27

The big question to me is whether it's enabled by default, and whether it blocks requests to Google Analytics. If so, that's an interesting shot across the bow.

What would it block? The JS file? Analytics only sets a cookie on the site using it, not one that works across sites.

Re: Apple adds a tracker blocker to desktop Safari

#60
post #47

Thumbs up for Apple distinguishing themselves by their pro-privacy stance, as opposed to MS, who don't have anything to win by Win10's excessive "telemetry" IMHO.

Internet Explorer has tracking protection since IE9.

Going to my IE right now to activate it, I have to say this is a janky solution. It opens the Add-ons window, where you can see you have no Tracking Protection Lists. Then you can click to browse the add-on gallery for them, and then you have to scroll down and pick a list from a set of options.

While this is flexible, open, and that's all good, the lack of a common sense default and a multi-step setup process is probably why like... even I am not using this right now.

If Apple does this by default, it's gonna make a huge dent in Google Analytics' numbers, whereas probably almost nobody uses the feature in IE.

Post reply on HN