News for hackers. Stuff that matters.
Re:Google’s approach to replacing the cookie is drawing anti... by ttt0 on Wednesday February 03, 2021 @08:02PM (#26021333)
I don't know, are fonts installed on your system PII? Because it can be used for fingerprinting. But I don't know the precise definition, so maybe you're right.
Re:Google’s approach to replacing the cookie is drawing anti... by tremon on Thursday February 04, 2021 @06:58AM (#26024614)
Intent matters. If you use the fonts list to identify persons, it's PII.
Re:Google’s approach to replacing the cookie is drawing anti... by ska on Wednesday February 03, 2021 @08:28PM (#26021507)
Perhaps a reasonable line to draw would be that if the content of the information is enough to fingerprint, the it is PII (regardless if broken into many messages) and the individual data doesn't matter.
Re:Google’s approach to replacing the cookie is drawing anti... by ttt0 on Wednesday February 03, 2021 @09:34PM (#26021907)
If we talk purely about "reasonable", I don't think it's even possible to draw any line, besides something obvious like unique user identifiers. It's hard to predict what data can be used for fingerprinting until someone actually does it, just like it's hard to predict what bugs are actually possible to exploit. I could never predict some of those things being used for that and yet here we are. So it can be a cat-and-mouse type of situation. And some of that information is probably legit useful for purposes other than tracking.