News for hackers. Stuff that matters.

A comment on EU privacy agency urges more safeguards to curb U.S. tech giants. Parent comment

Re:EU privacy agency urges more safeguards to curb U.S. tech... by speedgoose on Friday February 12, 2021 @10:36AM (#26114782)
Right now it's very easy to see, the companies are not hiding it at all. They send the data to third-party trackers straight from their website or application.
[ Parent | on HN ]
Re:EU privacy agency urges more safeguards to curb U.S. tech... by EGreg on Friday February 12, 2021 @10:49AM (#26114923)
Disqus loads a million external resources

That’s so stupid, why not just take your OWN cookie and use it in the backend to send to all these resources, proxying through your own server or having a CNAME for theirs under your domain?

[ Parent | on HN ]
Re:EU privacy agency urges more safeguards to curb U.S. tech... by speedgoose on Friday February 12, 2021 @10:58AM (#26115028)
I guess it's often much simpler and cheaper to not try to hide it.

The CNAME practice is becoming more and more common. See https://blog.apnic.net/2020/08/04/characterizing-cname-cloak... or https://medium.com/nextdns/cname-cloaking-the-dangerous-disg... or https://www.laquadrature.net/2020/10/05/le-deguisement-des-t...

I think proxying or doing it server side only will be implemented later when these people will be forced to hide to save their shitty business model.

[ Parent | on HN ]
Re:EU privacy agency urges more safeguards to curb U.S. tech... by Sayrus on Friday February 12, 2021 @11:22AM (#26115277)
CNAME cloacking has gone even further, ad company now ask you to put a A/AAAA record pointing to one of their IPs as CNAME uncloaking was working pretty well.
[ Parent | on HN ]
Re:EU privacy agency urges more safeguards to curb U.S. tech... by _-david-_ on Friday February 12, 2021 @01:10PM (#26116601)
I think the move will be for ANAME records. ANAME is not a real record (yet), but some providers are supporting them.

It is similar to a CNAME record but instead of storing the domain name you want to map to it pulls the A record and puts that IP as your A record.

[ Parent | on HN ]