Steven Englehardt
@s_englehardt
Followers
2K
Following
857
Media
72
Statuses
635
Find me somewhere better than here. Bluesky: https://t.co/q85OOqXQrD Mastodon: @[email protected]
New Jersey
Joined April 2014
I'm inactive on Twitter, find me over at: https://t.co/gjbP8NY515 or https://t.co/RsUalJDAsi
infosec.exchange
10 Posts, 110 Following, 429 Followers · Privacy at DuckDuckGo. Formerly Mozilla, PrincetonCITP. CS PhD. He/him.
0
0
2
PS: this is not even due to the United States's terrible privacy laws alone. Under Trump congress killed the regulatory rules that would have stopped this specific practice
krebsonsecurity.com
The past month has seen one blockbuster revelation after another about how our mobile phone and broadband providers have been leaking highly sensitive customer information, including real-time...
NEW: We watched as privacy advocates geofenced an abortion clinic in Florida, where the procedure remains legal, and identified specific devices that came from Alabama, where it is not. Inside the wild world of phone tracking data for sale. https://t.co/m8Fsk8pbzL
1
5
12
No, hashing still doesn’t make your data anonymous: https://t.co/AskTYM3AYg /1
ftc.gov
The Federal Trade Commission routinely evaluates the privacy representations a company makes against their data handling practices.[1] When discrepancies arise betwe
4
32
64
New from 404 Media: Google is now the only search engine that works on Reddit thanks to its AI deal. Try to search for Reddit results with Bing, DuckDuckGo, or a bunch of others you won't get full results. Further monopoly on valuable information
404media.co
DuckDuckGo, Bing, Mojeek, and other search engines are not returning full Reddit results any more.
38
527
1K
PPA in Firefox can be viewed as a regression from a status quo where Mozilla is blowing up the advertising ecosystem, but that's not really the status quo or feasible given that they depend so heavily on ads to fund development. Instead, this is incremental improvement.
0
0
0
Mozilla completely flubbed the communication of their PPA release, so I understand the frustration. IMO a big part of that is failing to communicate their own relationship and dependence on advertising to fund browser development.
Firefox testing privacy-preserving ad measurement is a good thing. I say that not because I like adtech built into browsers, but because it's better than the current ad measurement that happens with third-party scripts collecting cookies, click IDs, and IP addresses.
1
7
12
Also, I'd love for there to be an alternative to ad-funded browser engine development (or even just browser development), but I have yet to see any effort that's sustainable financially.
0
0
3
I'm glad Mozilla is participating here because, if not, the only players in the space will be much larger companies with different incentives and relationships with the web. Mozilla's participation in the Private Advertising Technology Community Group has been meaningful.
1
0
2
Moving away from the current measurement approaches is a good thing. A private ad measurement API doesn't need to solve every problem that exists with advertising (e.g., group-level targeting) to be a meaningful improvement over the status quo.
1
0
2
I'd rather that search ad measurement happen via an API that's been community-vetted with strong technical constraints than via the alternatives (i.e., tracking scripts or bespoke measurement schemes). No ad measurement isn't an option when browser development is ad supported.
1
0
2
Ads require measurement. Browser engine development is expensive and ad supported. That means that browsers need to allow some type of ad measurement to happen if they want to get paid for the search ads that fund their development.
1
0
2
Firefox testing privacy-preserving ad measurement is a good thing. I say that not because I like adtech built into browsers, but because it's better than the current ad measurement that happens with third-party scripts collecting cookies, click IDs, and IP addresses.
5
3
20
Private Browsing 2.0 – the details on Safari’s latest, industry-leading privacy protections:
webkit.org
When we invented Private Browsing back in 2005, our aim was to provide users with an easy way to keep their browsing private from anyone who shared the same device.
5
33
102
Apple requires that any alternate iOS browser engine block third-party cookies and partition state. Interesting leverage point. I wonder whether those requirements will advance as WebKit's default tracking protections expand. https://t.co/yvH4PkDJ1Y
0
4
7
📢 Announcement! I will be presenting my work “CookieGraph" /w @sansib @umaarr6 @zubair_shafiq @s_englehardt @carmelatroncoso at @acm_ccs. Join me in Session 10F on November 29, 1515-1530 to hear about our work on first-party tracking cookies. #ACMCCS2023 #Privacy #CookieGraph
2
15
53
Exciting Web Privacy News The Web is undergoing a significant advance in privacy at the moment. In recent weeks, the Chrome browser enabled cross-site storage partitioning. That is: many features in Chrome that used to leak data between websites, no longer leak. In Chrome 117,
3
32
121
Wild. MTA site allows anyone to query the past 7 days of ride history associated with a credit card number. You know, the number that creepy server at a restaurant might jot down, that is easily accessible to abusive spouses, etc.
New: I tracked the precise movements of an NYC subway rider. Saw what specific time they got on and at what station. It became obvious which station was nearest to their home. This was all because of a 'feature' on the MTA website Wide open to abuse
1
0
7
WebKit just released a proposal for ad attribution measurement that builds on top of Prio:
github.com
We have a proposal to allow measuring attribution of advertisements with privacy guarantees. We try to build on previous privacy proposals such as Private Click Measurement (PCM) , Interoperable Pr...
0
4
17
New from the TLS meeting at IETF 117: Encrypted Client Hello (ECH) is enabled for 1% of Chrome stable users. A big step for privacy online! https://t.co/hUyJp5qwm6
datatracker.ietf.org
This document describes a mechanism in Transport Layer Security (TLS) for encrypting a ClientHello message under a server public key. Discussion Venues This note is to be removed before publishing as...
2
37
104
Chrome is partitioning storage in 115 🪣|🪣 If you use APIs like LocalStorage, Clear-Site-Data, SharedWorker, etc. embedded across sites, then there's testing instructions and we've extended the deprecation trial if you need extra time to update ⤵ https://t.co/dx98u5nNmW
privacysandbox.google.com
Sites that haven't had time to adapt their sites for third-party storage partitioning can take part in a deprecation trial to temporarily unpartition and restore prior behavior of storage, service...
2
12
51