News for hackers. Stuff that matters.
Re:Facebook apologizes to users for Apple’s monstrous effort... by bad_user on Thursday August 27, 2020 @06:11AM (#24292008)
I always wondered if that advertising ID is GDPR compliant, given that the setting is currently opt-out, instead of opt-in. Even if it is low entropy.
Re:Facebook apologizes to users for Apple’s monstrous effort... by Nextgrid on Thursday August 27, 2020 @06:31AM (#24292148)
I don’t think it would be, however the party considered in breach would be the app developers and not Apple.

Consent should be opt-in and granular (a user might wish to opt-in for one app but opt-out for another one) so every app should’ve already implemented their own toggle (like iOS 14 would force them to) instead of just using it in the background and pointing users to the system-wide setting if they want to opt-out (which isn’t ideal if the user wants to remain opted-in for some apps only).

Re:Facebook apologizes to users for Apple’s monstrous effort... by bad_user on Thursday August 27, 2020 @12:54PM (#24295642)
IANAL. Not sure about that. IDFA is essentially a tracking cookie.

First of all under GDPR, tracking can be for a legitimate interest, and thus it might not require opt-in. For example security, or even first-party analytics, with the purpose of optimizing the content, can be legitimate interests. However this cookie is meant for advertising, and user profiling for marketing purposes doesn't pass the test for legitimate interest.

The other problem, for Apple, might be the revised E-Privacy Directive. You can't set such tracking cookies without informing users. Such cookies must be opt-in, whether you use them or not.

AFAIK Apple is simply complying with the law, whereas Facebook is effectively arguing for unlawful tracking, because that's just who they are.

Re:Facebook apologizes to users for Apple’s monstrous effort... by krageon on Thursday August 27, 2020 @06:46AM (#24292255)
> the party considered in breach would be the app developers

Given that this feature is entirely made by Apple, that's not a reasonable conclusion.

Re:Facebook apologizes to users for Apple’s monstrous effort... by rsynnott on Thursday August 27, 2020 @09:13AM (#24293330)
Your browser (probably) allows the use of cookies; however a website which doesn't ask the user for appropriate permission is still in breach of the law.
Re:Facebook apologizes to users for Apple’s monstrous effort... by wastedhours on Thursday August 27, 2020 @08:11AM (#24292846)
Isn't it down to the app developers though whether they allow the ID to be used to serve ads in their app (whether or not in practice there's a mechanism to do that, it's the app developer that's essentially choosing to use it by implementing ad networks and SDKs that use it, not Apple forcing it on them).
Re:Facebook apologizes to users for Apple’s monstrous effort... by kergonath on Thursday August 27, 2020 @12:44PM (#24295530)
It’s not Apple doing the tracking. The knife manufacturer is not reaponsible if you stab someone.
Re:Facebook apologizes to users for Apple’s monstrous effort... by MilaM on Thursday August 27, 2020 @06:32AM (#24292154)
My understanding is, that it's a random and unique identifier, and therfore very high entropy. Pooling that data allows FB to identify you in different apps that use the SDK, even if they don't have any other identifying info.