News for hackers. Stuff that matters.
Re:Privacy analysis of Tiktok’s app and website by namelosw on Friday December 06, 2019 @08:39PM (#21727864)
Not defending anyone but I have to point out that fingerprinting sounds like finding a fingerprint that could identify an individual, but that not true.

AFAIK browser fingerprinting (eg: Fingerprintjs2[0]) at least is nothing like fingerprints at all. It's not accurate and cannot identify a specific person. For websites like TikTok, the same fingerprint might points to 10k different people, instead of an individual. A most common use case is like 'Remember me' option when logging in if they haven't switched their device, but they actually can find other devices that have the same fingerprint.

For example, the most widely used library Fingerprintjs2 uses all the factors that can be grab from the browser (Browser agent, CPU, OS, resolution, etc), and generate a hash from those factors. Even their 'pro' version can only claim 99.5% accuracy, though I doubt the number is actually even lower. For 1M people userbase, it's 5000 people for 0.5% of the population.

[0]: https://github.com/Valve/fingerprintjs2

Re:Privacy analysis of Tiktok’s app and website by sjy on Saturday December 07, 2019 @01:03AM (#21728766)
I’m not too sure what “99.5% accuracy” is supposed to mean, but sites like https://amiunique.org usually tell me that my browser fingerprint is unique. Seems rather like a real fingerprint to me, except that I have more than one.
Re:Privacy analysis of Tiktok’s app and website by wizzwizz4 on Saturday December 07, 2019 @08:43AM (#21730228)
You have more than one real fingerprint, too.
Re:Privacy analysis of Tiktok’s app and website by Nextgrid on Friday December 06, 2019 @09:02PM (#21727952)
Combined with other data points like usage patterns (how the user behaves on the site, which features they use, etc), IP address I'd be confident the resulting fingerprint can be unique.