News for hackers. Stuff that matters.

A comment on Facebook JavaScript SDK is often illegal under GDPR. Parent comment

Re:Facebook JavaScript SDK is often illegal under GDPR by NVRM on Saturday June 23, 2018 @05:24PM (#17383532)
The wizardry is server side. See the css. You won't get the same hash. When called one time + ip + client browser hash, it is enough. Next website visited with a google font, you are tracked.

/* latin */ @font-face { font-family: 'Tangerine'; font-style: normal; font-weight: 400; src: local('Tangerine Regular'), local('Tangerine-Regular'), url(https://fonts.gstatic.com/s/tangerine/v9/IurY6Y5j_oScZZ784Ox...) format('woff2'); unicode-range: U+0000-(...) }

https://fonts.googleapis.com/css?family=Tangerine

[ Parent | on HN ]
Re:Facebook JavaScript SDK is often illegal under GDPR by rootlocus on Tuesday June 26, 2018 @08:40AM (#17400060)
That's sneaky, I didn't know about it. Thanks for pointing it out.
[ Parent | on HN ]