@lukasmueller Good question, but do you think it will...

@lukasmueller Good question, but do you think it will make a difference if the system returns 0.35 instead of 0.3499999940395355?
Other properties combined would still work well at identifying the device.

Like 4 February at 2:29 | Open on mastodon.social

6 comments

Lukas Müller

@mysk Despite millions of users, tracking would most likely still be possible even with rounded values. Do apps send this data even if app tracking is deactivated via the system prompt?

4 February at 2:32 | Open on infosec.exchange

Mysk🇨🇦🇩🇪

@lukasmueller Yes, it is sent despite opting out. App tracking is also denied. You can see that in the screenshot:

"unifiedconfig.pii.advertisingTrackingId":00000000000000000

The value is zeros because I denied the apps access to tracking.

4 February at 2:40 | Open on mastodon.social

Lukas Müller

@mysk I completely overlooked that. Thank you!
I'm always confirmed that it's right to filter tracking domains at DNS level to at least block known 3rd party trackers and advertisers.

4 February at 2:46 | Open on infosec.exchange

Mysk🇨🇦🇩🇪

@lukasmueller No worries 🙏
Advanced users can always find a way. Average users won't do any blocking and they are the vast majority of users. I think if average users also used DNS blocking, trackers would change tactics and start alternating their domain names.

4 February at 2:51 | Open on mastodon.social

Lukas Müller

@mysk Even as an experienced user, one is unfortunately very limited in options, as there is always a compromise between data protection and usability. Especially on mobile devices and when using apps, the possibilities are limited. In addition, the major players don't need third-party tracking, and built-in tracking can easily be served by the content domains

4 February at 3:02 | Open on infosec.exchange

Mark Hansen

@mysk @lukasmueller this looks like just floating point error. Look at all the 9s in a row; floating point can’t exactly represent 0.35 so you get this close number. Looks like the system already rounding to 1/100

4 February at 9:51 | Open on hachyderm.io

Go Up