News for hackers. Stuff that matters.
Re:Google, Meta 'break' Apple's device fingerprinting rules by jonas21 on Tuesday May 07, 2024 @12:12AM (#40282264)
The only monotonically increasing clock available on iOS is based on uptime. If you need to measure accurate timings or ensure that events are in the right order, you have to use it. As Apple points out in their guidelines, there are many legitimate uses for this information.

Developers can add an offset to the values before sending them off the device, and that seems to be what Apple wants them to do, but these companies have over a decade of pre-existing code that didn't do this. It's not surprising to me that there are some things that haven't been updated yet given that Apple only made these requirements public fairly recently.

Re:Google, Meta 'break' Apple's device fingerprinting rules by e136 on Tuesday May 07, 2024 @12:24AM (#40282316)
Adding an offset would still make this "derived data" which is "not allowed" to be sent off device.
Re:Google, Meta 'break' Apple's device fingerprinting rules by idle_zealot on Tuesday May 07, 2024 @12:21AM (#40282298)
Surely the fix here is to lie to apps about uptime, adding the offset at the OS level.
Re:Google, Meta 'break' Apple's device fingerprinting rules by caf on Tuesday May 07, 2024 @12:40AM (#40282406)
"boot time plus random offset" is going to be just as much of a fingerprint as "boot time" is, though (the offset can't change once picked for a boot because the whole point is to be able to calculate the time between events in the app).

Something that reduces the granularity a lot, like "time since UTC 00:00:00 on the day of the last device boot", might work.

Re:Google, Meta 'break' Apple's device fingerprinting rules by yencabulator on Wednesday May 08, 2024 @03:26PM (#40301946)
Make the offset app-specific. Then pretend the phone ran out of memory and ask the app to terminate every now and then, switch to a new random offset for every run.