News for hackers. Stuff that matters.
Re:Facebook apologizes to users for Apple’s monstrous effort... by thor24 on Thursday August 27, 2020 @06:47AM (#24292264)
Yes. IDFA's full form is "The Identifier for Advertisers" which is generated by OS itself. Think of it like a proxy of IMEI number itself (back in the old days IMEI itself was used instead of this).

All of the Apps get the same ID and that's how your "persona" graph is constructed.

Sidenote: One of the bets people are making with this change is that now free apps will start forcing you to signup (via email/mobile number) which will be used to construct this "persona" graph again because who has time to create new emails for these purposes.

Re:Facebook apologizes to users for Apple’s monstrous effort... by occamschainsaw on Thursday August 27, 2020 @07:02AM (#24292370)
Well, your phone has the time to create new emails for these purposes with the Sign In With Apple feature[1]. You don't have to remember your email nor your password because iOS can create a secure one and save it on your phone. More secure than people using the same email and password across multiple apps imo.

[1] https://developer.apple.com/sign-in-with-apple/

Re:Facebook apologizes to users for Apple’s monstrous effort... by jonplackett on Thursday August 27, 2020 @08:58AM (#24293197)
I wonder if Apple saw this coming and created Sign in with Apple in anticipation. Seems like a very smart play now.
Re:Facebook apologizes to users for Apple’s monstrous effort... by jaywalk on Thursday August 27, 2020 @09:51AM (#24293662)
You wonder if Apple saw a change in their own policy coming? Yes, I think they may have...
Re:Facebook apologizes to users for Apple’s monstrous effort... by jonplackett on Thursday August 27, 2020 @10:52AM (#24294251)
I mean that they also saw the reaction to that change coming, ie. they realised if they got rid of the advertising ID, it would make apps force you to log in. I'd be impressed if that was deliberate, but it could have been.
Re:Facebook apologizes to users for Apple’s monstrous effort... by Red_Leaves_Flyy on Thursday August 27, 2020 @09:26AM (#24293437)
What about phone numbers? Can't even make a Twitter or Google account without coughing up a phone number.
Re:Facebook apologizes to users for Apple’s monstrous effort... by thor24 on Friday August 28, 2020 @01:19AM (#24301600)
+1 Even after sign-ing up it requires me to authenticate every now and then (may be because I am using only twitter web).
Re:Facebook apologizes to users for Apple’s monstrous effort... by BTCOG on Friday August 28, 2020 @02:21PM (#24308296)
My 10 year old gmail account has no associated phone number. Maybe it's valuable now. It's the only thing I use at all that is a Google product, and I'm always near deleting the entire account but it's just so convenient (Read, I've been lazy)
Re:Facebook apologizes to users for Apple’s monstrous effort... by thor24 on Friday August 28, 2020 @01:18AM (#24301587)
Somebody commented below in the same parent comments that it's not a full proof thing.

You don't have to offer Sign in with Apple if you have your own login system. Ref: https://developer.apple.com/app-store/review/guidelines/#sig...

This is only applicable if the Apps provide this as an option right?

Re:Facebook apologizes to users for Apple’s monstrous effort... by tekknik on Friday August 28, 2020 @08:39AM (#24304128)
But notably you can’t use any SSO providers. So if you want to use SSO you must support login with apple.
Re:Facebook apologizes to users for Apple’s monstrous effort... by thor24 on Friday August 28, 2020 @10:06AM (#24304971)
Ah yes. Good point.
Re:Facebook apologizes to users for Apple’s monstrous effort... by Sysosmaster on Thursday August 27, 2020 @07:11AM (#24292448)
Regarding your side note. Apple is also, more and more, requiring you allow the login with Apple button. This would effectively shield most of the data off if you want.
Re:Facebook apologizes to users for Apple’s monstrous effort... by andylynch on Thursday August 27, 2020 @07:04AM (#24292385)
Interesting workaround. I imagine this could in turn lead to more pressure on these same apps to implement Sign In with Apple - as a user, its email privacy feature becomes more interesting in this scenario.
Re:Facebook apologizes to users for Apple’s monstrous effort... by wasyl on Thursday August 27, 2020 @07:25AM (#24292539)
> more pressure on these same apps to implement Sign In with Apple Afair this is actually a requirement: if you have email/facebook sign in option, you need to implement Sign In with Apple as well
Re:Facebook apologizes to users for Apple’s monstrous effort... by jayrhynas on Thursday August 27, 2020 @07:56AM (#24292757)
Not quite. If you offer 3rd party logins you must also offer SIWA, but if you only have email/password you don’t have to.

https://developer.apple.com/app-store/review/guidelines/#sig...

Re:Facebook apologizes to users for Apple’s monstrous effort... by LeoNatan25 on Thursday August 27, 2020 @09:55AM (#24293717)
I use email aliases to sign up to services for this reason exactly. There is no way to link the aliases, and so tracking is limited to the registered site only. The Log In with Apple solves this more elegantly
Re:Facebook apologizes to users for Apple’s monstrous effort... by SllX on Thursday August 27, 2020 @10:18AM (#24293937)
Sign In with Apple is not a panacea. UPS on-boarded me a couple of weeks after my initial registration, and the two services I’ve used it for (UPS and Etsy so far) have received my name from the initial registration process (a radio button selection and a bioauth).

I wouldn’t treat it as a privacy feature, I would treat it as a convenience feature. When I needed some extra mask straps, I installed Etsy, didn’t previously have an account. So I used Sign In with Apple to register, picked out some mask straps, and Apple Pay to pay. The whole process only took as long as it took for me to make a selection and two biometric authentications, but some of my information had to be exchanged in order to make that transaction possible.

Also I can login to UPS and Etsy without a password.