Re:Google, Meta 'break' Apple's device fingerprinting rules
by e136 on Tuesday May 07, 2024 @12:24AM
(#40282316)
Adding an offset would still make this "derived data" which is "not allowed" to be sent off device.
Re:Google, Meta 'break' Apple's device fingerprinting rules
by idle_zealot on Tuesday May 07, 2024 @12:21AM
(#40282298)
Surely the fix here is to lie to apps about uptime, adding the offset at the OS level.
Re:Google, Meta 'break' Apple's device fingerprinting rules
by caf on Tuesday May 07, 2024 @12:40AM
(#40282406)
"boot time plus random offset" is going to be just as much of a fingerprint as "boot time" is, though (the offset can't change once picked for a boot because the whole point is to be able to calculate the time between events in the app).
Something that reduces the granularity a lot, like "time since UTC 00:00:00 on the day of the last device boot", might work.
Re:Google, Meta 'break' Apple's device fingerprinting rules
by yencabulator on Wednesday May 08, 2024 @03:26PM
(#40301946)
Make the offset app-specific. Then pretend the phone ran out of memory and ask the app to terminate every now and then, switch to a new random offset for every run.
Developers can add an offset to the values before sending them off the device, and that seems to be what Apple wants them to do, but these companies have over a decade of pre-existing code that didn't do this. It's not surprising to me that there are some things that haven't been updated yet given that Apple only made these requirements public fairly recently.