This application is a first step to investigate the fingerprintability of the mobile ecosystem. We plan on releasing another app similar to the https://t.co/kgVEkz6sAG website where you will be able to see how your own fingerprint compares to all the other collected fingerprints.

When you launch AmIUnique and tap "Scan my device", the application will collect your device fingerprint and display a selection of key attributes. Our goal is to analyse all the fingerprints we will receive to understand if the way Android is built can pose a privacy problem.

AmIUnique is starting a new adventure on mobile! 🎉📱 We have just launched our first Android application to study if users can be identified through an application without using a single permission. Link: https://t.co/pOJfPrQbAw Retweets are greatly appreciated 😊

I'm looking for a postdoctoral/research associate to join my group at @NYUAbuDhabi in sunny Abu Dhabi! ☀️🏖️💻 Postdoc application: https://t.co/3v5z7N3uOp Don't have a PhD? Apply to be a research associate: https://t.co/W568Bv8CBg Three good reasons to apply: 1/2

After several success iterations of SecWeb, @stecalzavara and I have decided that it's best for the Web community to merge with MADWeb, as we want to avoid fragmenting the community. So, please consider submitting to https://t.co/QvJaJ3UAHr (weather is nicer in San Diego ;-))

Google won't deprecate third-party cookies after all. This seems to be the worst outcome for me as heavy investment has been made in the past four years to develop alternatives that will now work alongside existing 3P cookies. Tracking will be more present on the web as a result.

Our paper on Server-side tracking will be presented by @Fouad__Imane at #PETS2024 on Thursday! Come say hi to her to know more! Unfortunately, I had to cancel my trip at the last minute 😢

To finish, a big takeaway of our study is that there is a real need to look closer at server-side tracking because of the harm it can cause. After working 2+ years on this topic, it is hard to investigate because it was designed that way and it needs to be properly regulated.

The second problem is about the responsibilities and liabilities of the different actors in the data collection. Now that there is an additional intermediary server in the mix, who is responsible and liable for that? How can users exercise their rights to access their data?

On the legal side, on top of infringement of GDPR and the ePrivacy directive we found on some websites, we identified two main problems. First, the transparency obligations are impossible to verify as we have no way of checking where the collected data is being sent to.

For this study, we focused on detecting a small subset of SST servers. We relied on different crawls made in 2020 and 2022 to detect websites that shifted from the traditional tracking model to the server-side tracking one and found some websites that operated that change.

With Imane and Cristiana, we decided to tackle this subject in 2022 on both the technical and legal aspects. And wow, it is hard. Since its goal is to hide as much as possible on the server side, it really changes the way we do measurement studies as everything is opaque.

On top of that, most of these intermediary servers are hidden as a first-party ressource through techniques like CNAME cloaking so that they can bypass ad blockers and not be affected by the upcoming third-party cookie depreciation. In short, it is a perfect privacy nightmare.

What is server-side tracking? Instead of the browser contacting directly different third parties, it only contacts a single server that dispatches tracking data to other third party servers. The catch? It is impossible to audit from outside as everything happens in the background

I'm super happy to announce that our paper on server-side tracking (SST) made with @Fouad__Imane and @Cristianapt was accepted at PETS! "The Devil is in the Details: Detection, Measurement and Lawfulness of Server-Side Tracking on the Web" PDF https://t.co/iVR6bykDXW More info 🧵

I'm looking for a postdoc to join my group at @NYUAbuDhabi in sunny Abu Dhabi this fall! ☀️🏖️💻Apply here: https://t.co/GbJqNJfPeo Three good reasons to apply: 1/2

La CNIL a aidé la société VALIUZ à réaliser un profilage de masse des Français, mais refuse toujours de tout communiquer. J'ai saisi le tribunal administratif pour l'obliger à le faire, avec Mᵉ @AFOCobhthaigh. Les explications et les docs déjà reçus :

Congratulations to #MADWeb 2024 Best Paper Award! @Naif5Mehanna @rudametw @RockPartridge @xopek59 Paper link: https://t.co/uU0ye73VrS

I had a fantastic time at #MADWeb today with great discussion all around! It was my first big trip overseas since COVID and it felt great to reconnect with a part of the community that I haven't seen for quite some time. Thanks again to Aurore and Yinzhi for the invitation!

Join us tomorrow for #MADWeb in the Kon Tiki Ballroom @NDSSSymposium. We have an awesome program, starting with @RockPartridge keynote at 9am! https://t.co/NnVrHw1uXp