News for hackers. Stuff that matters.
Re:FLoC Away from Chrome by LordHeini on Friday April 16, 2021 @04:13AM (#26831030)
No because third party cookies (which are needed for cross site tracking) are often (and should be) blocked.

The floc is based on your browsing history. It is sort of a hash of the sites you visited and can be requested via a Js call by any (!) site you visit.

The floc is shared by a group of users not sure how that works but it is stated that those are a few 1000 large.

Combine that with other tracking stuff like fingerprinting and ip and you can easily identify a user (especially if you are google and your adds hang around everywhere in the net).

Re:FLoC Away from Chrome by Google234 on Friday April 16, 2021 @05:20AM (#26831525)
You can block floc too... which kind of kills your argument that it’s worse since it’s not worse than 3rd party cookies
Re:FLoC Away from Chrome by zeusflight on Friday April 16, 2021 @11:01AM (#26834743)
This is what Brave team says about FLoC vs 3rd party cookies [1]:

> Google says FLoC is privacy preserving compared to sending third-party cookies. But this is a misleading baseline to compare against. Many browsers don’t send third-party cookies at all; Brave hasn’t ever. Saying a new Chrome feature is privacy-improving only when compared to status-quo Chrome (the most privacy-harming popular browser on the market), is misleading, self-serving, and a further reason for users to run away from Chrome.

Most regular users wont install a blocker. But most other browsers block 3rd party cookies by default. Meaning, Chrome's market share will be the only reason FLoC will ever succeed. On top of that Chrome is known to shift the goal posts for blockers. You shouldn't be surprised if FLoC cannot be blocked on Chrome in the future.

[1] https://brave.com/why-brave-disables-floc/

Re:FLoC Away from Chrome by billytetrud on Monday April 19, 2021 @01:06PM (#26865166)
That sounds disingenuous. Most browsers do not block cookies by default. Cookies are a critical piece of the web. Chrome doesn't, Firefox doesn't, and ie/edge don't. Sounds more like Brave is giving themselves a pat on the back.