22 replies

1. Christian "Schepp" Schaefer 12 min later

   @zachleat pinging @wilander / @johnwilander

   1. wilander 9 hr later

      @Schepp @zachleat We’ll see if we can get something up on the WebKit blog.

      1. Zach Leatherman 19 hr later

         @wilander @Schepp I would really appreciate that, thank you!

         1. wilander 1 day later

            @zachleat @Schepp While I have you, on a personal note, I use 11ty to build my author website: https://hackerfiction.net 🙂👍🏼

            1. Zach Leatherman 1 day later

               @wilander @Schepp Awesome!! 🙌🏻🙌🏻🙌🏻

               1. wilander July 17, 2024

                  @zachleat @Schepp Do I get to say finally? 😀 https://webkit.org/blog/15697/private-browsing-2-0/ Sorry about the delay.

                  1. Christian "Schepp" Schaefer July 17, 2024

                     @wilander I say it was absolutely worth the wait! Very detailed and a very interesting read. Thank you and your whole team for pioneering this topic and for never resting but instead constantly pushing for more! 🙏 @zachleat

                  2. Zach Leatherman July 17, 2024

                     @wilander @Schepp Excellent level of detail—thank you very much! I reshared it here: https://fediverse.zachleat.com/@zachleat/112802111137376744

                  3. Christian "Schepp" Schaefer July 17, 2024

                     @wilander @zachleat Just found one more fingerprinting vector for you folks to consider: https://css-tip.com/screen-dimension/

2. Matthias Ott 36 min later

   @zachleat Asking this question doesn’t sound suspicious at all, Zach… 😁

   1. Zach Leatherman 38 min later

      @matthiasott I am genuinely curious!

      1. Matthias Ott 41 min later

         @zachleat All I know is that it removes tracking parameters from URLs. But I guess *which* params it removes is a company secret. 🤫

         1. Matthias Ott 42 min later

            @zachleat https://www.macrumors.com/2023/06/17/safari-link-tracking-protection/

            1. Zach Leatherman 43 min later

               @matthiasott mmhmmmmmm blink twice if it sounds like you-tee-emm-underscare

               1. Matthias Ott 52 min later

                  @zachleat 🤔 According to Matomo, UTMs should still work (for now) but for other ad-related params “iOS 17 presents a challenge”:

                  https://matomo.org/blog/2023/09/ios-17/

                  1. Zach Leatherman 55 min later

                     @matthiasott Wow! That arbitrary line seems to open themselves up to legal action (note: IANAL)

                     1. Dan Ryan 4 hr later

                        @zachleat
                        From the reading I’ve done (including that Matamo article) it looks like tracking parameters aren’t effected unless they look like they’re tracking a single person. I did some experiments early on in the betas and that seemed true. I need to research more now that the real thing is live.

                        1. Zach Leatherman 19 hr later

                           @d fascinating, I wonder how they determine that

                           1. Dan Ryan 22 hr later

                              @zachleat uuid looking stuff is a pretty easy tip off

                              1. Zach Leatherman 23 hr later

                                 @d I would think that the false positive case would be too destructive to rely on it, hmm 👀

                                 1. Dan Ryan 1 day later

                                    @zachleat
                                    Me too. I have a feeling this will either be very targeted (Facebook and Google specific parameters) which will probably mean lawsuits; or timid enough it doesn’t do much.

                  2. Matthias Ott 1 hr later

                     @zachleat They are basically removing all params with “id” that are being used to identify users and sessions on and also across sites. Like Facebook’s `fbclid` that the Meta Pixel then stores in a cookie…