Slashdot Mirror


Mozilla Wants Apple To Change Users' iPhone Advertiser ID Every Month (zdnet.com)

Mozilla has launched a petition today to get Apple to rotate the IDFA unique identifier of iOS users every month. From a report: The purpose of this request is to prevent online advertisers from creating profiles that contain too much information about iOS users. IDFA stands for "IDentifier For Advertisers" and is a per-device unique ID. Apps running on a device can request access to this ID and relay the number to advertising SDKs/partners they use to show ads to their users. As experts from Singular, a mobile marketing firm explain, "IDFAs take the place of cookies in mobile advertising delivered to iOS devices because cookies are problematic in the mobile world." IDFAs are different from UDIDs, which stand for "unique device identifiers," which are permanent and unchangeable device identifiers. Apple added support for IDFAs specifically to replace UDIDs, which many apps were collecting for all sorts of shady reasons, enabling pervasive tracking of iOS users.

101 comments

  1. Now go after Microsoft by Anonymous Coward · · Score: 1

    They do the same thing.

    1. Re:Now go after Microsoft by Red_Forman · · Score: 2

      And then go after Google and Facebook, and watch them laugh at your demands.

    2. Re:Now go after Microsoft by Anonymous Coward · · Score: 0

      Are you kidding? I bet Goobook sees the advantages of this. With UDIDs you sell them something once but with IDFAs that change you get regular income for access to the new identifiers.

    3. Re:Now go after Microsoft by KiloByte · · Score: 2

      Microsoft at least does IDKFA -- with apple, the K are entirely Apple's, not shared for you. (Hint: you're doomed. A cookie (of the non-tracking kind) to anyone who gets the reference.)

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    4. Re:Now go after Microsoft by viperidaenz · · Score: 2

      Who does IDDQD then?

  2. Reasonable And Good Idea by omfglearntoplay · · Score: 3, Insightful

    I think this is a very reasonable thing to do. Now that we have the government looking hard at all this data collection, now is the time for Apple to step up and do something like this to help out the end user.

    1. Re:Reasonable And Good Idea by AmiMoJo · · Score: 1

      Maybe it would be better to connect the function call to a random number generator.

      Then again that might encourage advertisers to look for other ways of fingerprinting the device.

      That's the reason that Apple argued in favour of making the HTML5 pingback function mandatory and impossible to disable. Yes Google got the flak for it but Apple made the same argument. If it's removed then advertisers will just find some other way to do it, making things worse.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    2. Re:Reasonable And Good Idea by AHuxley · · Score: 1

      Why would any internet user want to accept tracking by a computer company, ad company?

      --
      Domestic spying is now "Benign Information Gathering"
    3. Re:Reasonable And Good Idea by Anonymous Coward · · Score: 0

      The best thing to do would allow the user control over what bits of information are sent from their device in the first place. But that would be totally off-brand for something like Apple. Even their users would protest that their device isn't doing everything for them opaquely and automatically.

    4. Re:Reasonable And Good Idea by Anonymous Coward · · Score: 0

      So give them an officially-supported way to be evil, or they'll just find other ways?

    5. Re:Reasonable And Good Idea by Anonymous Coward · · Score: 0

      Then again that might encourage advertisers to look for other ways of fingerprinting the device.

      That's the reason that Apple argued in favour of making the HTML5 pingback function mandatory and impossible to disable. Yes Google got the flak for it but Apple made the same argument. If it's removed then advertisers will just find some other way to do it, making things worse.

      Every time advertisers find a way to track the user, it must be countered. Giving up is not an option. They "they'll just find another way to keep doing it anyway" argument doesn't fly -- it is imperative that we keep this cat and mouse game going until they screw up so badly that it ends in their own ruin, or at least regulation.

      Make them work to track us. Make it cut into their operating budgets. Force them to get worse, and worse, and worse, so when the day comes that they're just straight-up rootkitting our phones out of frustration (and mark my words, they will,) we can raid their offices with armed SWAT officers for breach of the CFAA.

      Advertisers are an insidious, parasitic sub-human form of life. Just look at that previous article about what they want to do to the fucking night sky. They need to be brought down hard. Perhaps a SWAT team with orders to paint their office walls red if they so much as blink would force them into being good corporate citizens for the first time in their miserable existence.

      Tough love is the only way to deal with scum like this.

    6. Re:Reasonable And Good Idea by alvinrod · · Score: 2

      Better to constantly rotate existing IDs than to randomly generate new ones. If you reuse existing ones and change them randomly, it pollutes data sets in ways that are harder for the companies that maintain them to detect. People are creatures of habit, so it likely wouldn't take very long to tie a pattern of behavior to an existing profile with a high degree of certainty.

      At the end of the day if the user has full control over their device (which they don't with Apple), there isn't anything that advertisers can attempt to do that the user can't thwart in some way. Add in a VPN or some other service that obfuscates your IP / location and there's not a lot that they can do.

    7. Re:Reasonable And Good Idea by Wrath0fb0b · · Score: 2

      At the end of the day if the user has full control over their device (which they don't with Apple), there isn't anything that advertisers can attempt to do that the user can't thwart in some way.

      Add in a VPN or some other service that obfuscates your IP / location and there's not a lot that they can do.

      True in theory.

      Devilishly difficult to implement in practice, because what you are proposing is the elimination of all side channel information leakage from the browser to the web host. And all those tiny bits of information that can add up (user-agents, DOM support) to a pretty good identifier. Check out the EFF's Panopticlick site, which details all the tiny information leakages and sums them up.

      Add to that canvas fingerprinting and other skullduggery, and even with full control over a device, it's an uphill battle to thwart all the ways an advertiser can assign you a unique stable identifier.

    8. Re: Reasonable And Good Idea by Anonymous Coward · · Score: 0

      It's funny that you think Apple gives a fuck about the end user.

    9. Re:Reasonable And Good Idea by AmiMoJo · · Score: 2

      Ask all the people who don't install an ad blocker I guess.

      For companies like Apple and Google the issue is that if they do start a war with advertisers, it will get nasty very quickly. Say they decide to remove HTML5 pingback and disable Javascript entirely, the advertisers will just change the links to go via a redirect page that logs the referer. Block the referer and they will encode it in the URL, block that and they will use cookies, block those and by that point everyone will be miserable because most of the web is broken and they can't buy shit from Amazon any more.

      The fundamental problem is that users want content for free, but they don't want to be tracked which is how a lot of that content is funded. Apple and Google are trying to balance those desires by keeping the tracking to a "reasonable" level.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    10. Re:Reasonable And Good Idea by hawk · · Score: 1

      >Better to constantly rotate existing IDs than to randomly generate new ones.

      Long ago, in the days when Junkbuster was enough, it had a "cookie jar" feature.

      I don't know if it was ever completed, but the point was to trade tracking cookies on servers . . . at the time, I simply had a folder with the cookie file name (".cookies"? It's been a while), so they failed anyway.

      hawk

    11. Re:Reasonable And Good Idea by Anonymous Coward · · Score: 0

      apple does not care about the end user, just the cash they spend on apple crap

  3. Re:Or take matters into you own hands... by Red_Forman · · Score: 3, Funny

    Advertisers are the problem, so you want to get rid of Apple.

    You're a dumbass.

  4. Nah, just make it user-settable by Anonymous Coward · · Score: 0

    1 month might be a good default, but if I want "forever" I should be allowed to.

    Other intervals, from less than a minute to a year or more, should be offered.

    If I want it to "change it every time it's requested" I should be allowed that choice as well.

    I prefer the last one, but some may prefer the first.

  5. You have no power here, Mozilla the Grey by Anonymous Coward · · Score: 0

    Firefox is on its dying gasps, why would Apple give a shit what Mozilla thinks?

  6. Or take matters into you own hands... by Anonymous Coward · · Score: 0

    ... and get rid of your Apple products for life.

  7. Use a company who actually has a positive motto... by Anonymous Coward · · Score: 0

    ... such as "Don't be evil."

  8. Seems pointless by Altus · · Score: 4, Informative

    If apple does this people will simply save the ID locally and when the app launches and the ID that the system gives you doesn't match the one you have saved you make a call to record the new ID and bingo you have a running, relatively up to date ID tied to a history of different IDs as the same devic.

    --

    "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

    1. Re:Seems pointless by Anonymous Coward · · Score: 0

      Also a quick way to get your app removed from the app store.

    2. Re:Seems pointless by Altus · · Score: 1

      How so? You are certainly allowed to report your IDFA back to the server or it would serve no purpose at all. You are also allowed to report back the ID you get back that is App/phone specific (that is, unique per app, per phone). That alone is enough to create a long running list of IDs associated with a phone on your server. Any of this could be done with fairly innocuous calls that would never raise any eyebrows at all.

      --

      "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

    3. Re:Seems pointless by garcia · · Score: 2

      I work in the industry building customer-level cross-device marketing attribution models. This is a complete non-factor for most companies, just like ITP changes, it is a mere annoyance more than anything.

      We are able to get 100% match to customers through digital only interactions and >60% match across any number of devices to customers who interact with digital channels but only buy through brick and mortar, without any crazy shit/third parties/etc.

      So, while this is a great soundbite, it's ultimately not doing much but bring more attention to the public about how their data are being used to target them to buy more.

    4. Re:Seems pointless by Anonymous Coward · · Score: 0

      Apple lets you change the ID to show that they are privacy-friendly. The omission of auto-rotating this ID, however, could not have been accidental.

    5. Re: Seems pointless by Anonymous Coward · · Score: 0

      So you're saying that you're part of the problem.

      Claiming that what a customer purchased in a store is some attributable to what someone has displayed on a screen? If you serve up a random brand of toilet paper, and I happen to purchase it at some point (after I've compared the price/sq ft and it meets my requirements) you somehow claim victory that marketing works?

    6. Re:Seems pointless by Altus · · Score: 1

      They do not let you change the ID, it is provided by an API as is the one that is per app/per phone. Nothing in auto rotating this would make it materially harder to track users across multiple apps. Its just more effort.

      --

      "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

    7. Re:Seems pointless by Anonymous Coward · · Score: 0

      So in Privacy/Advertising, what is "Reset Advertising Identifier..."? I also have "Limit Ad Tracking" on which states "You may still receive the same number of ads, but the ads may be less relevant to you."

      I would expect a reset to generate another random ID. You indicate otherwise?

    8. Re: Seems pointless by Anonymous Coward · · Score: 0

      I mean, in the most simplistic terms, yes, that's one way to look at it; however, the models are generally far more complex than that.

    9. Re:Seems pointless by cjmnews · · Score: 1

      You are right, Altus is wrong.

      --
      You can lose something that is loose, so tighten the loose item so you don't lose it.
    10. Re:Seems pointless by Altus · · Score: 1

      Maybe you can read up on what that switch actually means

      https://possiblemobile.com/201...

      --

      "In America, first you get the sugar, then you get the power, then you get the women..." -H. Simpson

  9. get rid of Apple easier said than done by Anonymous Coward · · Score: 0

    I would, but BananaJr is obsolete not to mention originally fictional, and PearPC and Orange Micro are dead.

    The various Pis are a good start but they aren't quite powerful enough for me.

  10. Re:Or take matters into you own hands... by Penguinisto · · Score: 5, Insightful

    ... and get rid of your Apple products for life.

    ...and go straight to Android, where they -

    Oh, wait.

    Yeah, nevermind.

    Perhaps going back to an old school flip-phone isn't such a bad idea anymore?

    --
    Quo usque tandem abutere, Nimbus, patientia nostra?
  11. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    From TFS:

    Apple added support for IDFAs...

    They didn't have to, but they did. How is Apple not culpable in this?

  12. You're making your choice. by Anonymous Coward · · Score: 0

    You are that part of society that is funding the continuation of this stuff.

    The Founding Fathers of the US said "Fuck you, Georgie boy!" and went to war.

    You're a royalist, saying "Yeah, it would be nice to have representation give that I'm subject to taxation, but you know, what can you do? Who else is going to build the roads? I like roads."

  13. Re:Or take matters into you own hands... by fred6666 · · Score: 1

    At least on Android you can run Firefox. Without any hacks.
    Browsers on iOS are merely skins for Safari.

  14. Or... by Nkwe · · Score: 4, Interesting

    We could just not save advertiser IDs at all.

  15. Re:Or take matters into you own hands... by tepples · · Score: 1

    Without adding some way for publishers and advertisers to identify whether a user has already seen a particular ad, Apple would have bled developers to Android even faster.

  16. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    Nah, let them think that the browser/app ecosystem (on the form factor with the least user control ever) totally backs off and doesn't track/metric everything because there's a fruit logo on the case. They're happier that way.

    The only privacy you have is the one you take back. Turning the blinds over your windows is gonna do a lot more than buying privacy-respecting toothpaste.

  17. Re:Or take matters into you own hands... by FictionPimp · · Score: 2

    I'm happy to, but first can you show me a android phone that I can buy with all the google integrations removed? I consider google a bigger threat than apple to my privacy and I do not want to use any service related to them.

  18. Would you prefer a paywall? by tepples · · Score: 2

    Why would any internet user want to accept tracking by a computer company, ad company?

    Because the viewer finds ads less inconvenient than having to key in a credit card number and pay $5 for a month's subscription to view one document on a website that put up a paywall once privacy-respecting ads became no longer viable. Ads based on each viewer's inferred interests pay three times as much as ads based solely on the document's context.

    1. Re:Would you prefer a paywall? by cayenne8 · · Score: 1

      Because the viewer finds ads less inconvenient than having to key in a credit card number and pay $5 for a month's subscription to view one document on a website that put up a paywall once privacy-respecting ads became no longer viable. Ads based on each viewer's inferred interests pay three times as much as ads based solely on the document's context.

      Well, then make it Opt-In for everyone.

      I'd prefer sites to ask me if they can active these 'features" in order to make ad supported delivery of content.

      I can then decide if the content is worth it to me or not....for me, I'd say 99.999999% of the time it is not worth it and I"ll go on my way to other things to read, etc.

      Tracking should NOT be on by default, it should be opt in only.

      It is the user's data, it should be the users choice if it is to be shared or not.

      --
      Light travels faster than sound. This is why some people appear bright until you hear them speak.........
    2. Re:Would you prefer a paywall? by Immerman · · Score: 1

      >>Why would any internet user want to accept tracking
      >...once privacy-respecting ads became no longer viable...

      If the ads are tracking you, they are NOT respecting your privacy.

      --
      --- Most topics have many sides worth arguing, allow me to take one opposite you.
    3. Re:Would you prefer a paywall? by Anonymous Coward · · Score: 0

      I would personally, you assume tracking must exist for content, this is not true

    4. Re:Would you prefer a paywall? by tepples · · Score: 1

      Exactly. When ads that respect your privacy became no longer economically viable, the industry switched from ads that respect your privacy to ads that track you.

    5. Re:Would you prefer a paywall? by tepples · · Score: 1

      I agree that tracking need not exist. But one of the following must exist: A. payment, B. tracking, or C. lowering production values to those of a hobbyist in his free time.

  19. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    These days more than ever, Stallman is starting to seem less crazy...

    What does it matter if you use a different browser, when Google owns the platform you're operating on? I mean aside from personal taste (User interface/experience)

    Whenever anybody brings up, it can run Firefox, I generally assume the mean it's less call-home-ey.

  20. ADVERTISING IDS IN AN OS IS FUCKING EVIL! by Anonymous Coward · · Score: 0

    tech Companies are scum for doing this to us.

    Microsoft gets extra scum points for turning a PC in to the most surveilled product even above google.

    Why can't we just make money in decent ways with out resorting to scumbag tactics and viewing users as cows?

    Fuck them.

  21. Enabling oligopolies by Anonymous Coward · · Score: 0

    As somebody who has worked in adtech, and now works in fraud prevention, I think Mozilla's actions are ultimately of a suicidal nature- they are handing Google and Facebook even more fuel for their oligopolies at the expense of every other player in the industry, and given long enough, this will threaten the existence of the Mozilla foundation itself. Furthermore, and counterintuitively, these actions (including changes to cookie policies and attempts to defeat device fingerprinting) will have negative impacts on consumers when fraud detection technologies cease to function and everybody is forced to go through extreme steps to verify their identities. Sorry, I dont want to have to scan an ID and take a selfie every time I transact. Fraud losses at online retailers already total 8% on average, and that would easily climb to 30% if fraud prevention tech didn't work. The long term economic consequences of moving towards extreme privacy measures will be real and painful for people both inside and outside of these industries.

    1. Re:Enabling oligopolies by Anonymous Coward · · Score: 0

      Why are you equivocating tracking methods with fraud prevention? They aren't the same thing. That's like saying my bank should have a P.I. following me around, watching everything I do that isn't even related to banking or commerce, just to make sure I'm the right person when I put my card into an ATM once or twice a week.

      I block the shit out of tracking methods to an absolute paranoid level, I verify my entropy with various fingerprint detection services, and I've never once had a problem with, say, ordering shit off Amazon. I have an account with them, so I log in with my credentials and they identify me. Simple.

      So what the hell are you talking about?!

    2. Re:Enabling oligopolies by Anonymous Coward · · Score: 0

      I work in fraud prevention, you are 100% wrong if you think that cookies, MAIDs and device fingerprints aren't heavily leveraged in the industry.

      Regards,
      Somebody who knows what they are talking about

    3. Re:Enabling oligopolies by Anonymous Coward · · Score: 0

      The only thing you need to order from Amazon is a cookie, and it works if you force it to session-only. No JavaScript or any of that other crap you mention is necessary. Optional, but not necessary. Try it some time, you can actually place an order on Amazon without ever enabling JavaScript, even for Amazon's own domain.

      I also block JavaScript from all but what's necessary to make my online banking work. Cookies are session-only, cache is cleared after every time I close my browser, privacy.resistFingerprinting is always True... and this is with my fucking bank!

      I don't care where the hell you work or what excuses you have for the ethical sacrifices you make in the course of doing your job, I'm telling you that tracking is NOT FUCKING NECESSARY for fraud prevention. Perhaps for fraud investigation, but certainly not prevention. If that were true, I wouldn't be able to do what I do.

      Regards,

      Somebody who does his online shopping and banking simply by being authenticated on the domains I'm visiting, rather than being tracked across everywhere I go on the entire fucking Web.

    4. Re:Enabling oligopolies by Anonymous Coward · · Score: 0

      Your sample of 1 user on 1 site is not indicative of anything. Try doing the same thing at a smaller merchant that uses Iovation, Threatmetrix, Ideology, Riskified, or an other numerous platforms and you may have more trouble. Try doing it while you're miles away from home or on a VPN network, and I guarantee you will not have the same results.

  22. how about.. by Anonymous Coward · · Score: 0

    allowing the user to decide whether to share udid, idfa, guids, imei, esn, telephone numbers.. anything similar.. with an app.. because it's a fucking app. bar apps that 'require' any of those to function properly.

    while they're mainly used to help enable the massive tracking of mobile devices.. phones can be stolen or compromised, unique hardware identifiers should not be used for authentication purposes.. so no, you can't claim it's to verify users... you're not verifying the user, you're verifying the device.

  23. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    In the iPhone's formative years I would have completely agreed with you, but not today.

    People will continue to make apps for Apple devices regardless of the stance they take on advertising. The iPhone is popular; it's practically jewellery for most people; it's a status symbol more than it is a platform. People will make apps for iPhones even if they make it more advertiser-hostile than a paranoid Linux user's setup, simply because it has a large, brand-loyal userbase and majority market share.

    That market share could only stand to increase if Apple were to make a public showing of trying to help their users avoid advertiser tracking, in the same way that Apple makes a public showing of their full device encryption and other security features.

    People are actually starting to care about that stuff now, slowly but surely. Imagine what good it could do for Apple's brand identity, if they establish themselves as the "anti-Android"! Just think of the ads we'd see on TV!

    "Hi, I'm an iPhone, and I do everything I can to keep your private life private."

    "Hi, I'm an Android. I watch you while you poop, and so do all my friends."

    Apple doesn't have to bend the knee to advertisers. They're established. They won the smartphone market share race. Users like how Apple's apps are more locked down and curated compared to Android's "just let everything through" approach to app approval. Surely they wouldn't mind Apple helping make a less creepy experience for them.

  24. Hypocrites by the_skywise · · Score: 1

    For a company that forced paid-for extension installations and ads into their browser to sustain themselves they don't really have room to attack others.
    Take the board out of your eye before complaining about the splinter in others.

    1. Re:Hypocrites by Anonymous Coward · · Score: 0

      Mozilla isn't a company.

      You know that right?

    2. Re: Hypocrites by Anonymous Coward · · Score: 0

      By company you mean nonprofit, right?

      It's not like their users pay for Firefox, or their data is mined to advertisers. They need to pay the bills somehow

    3. Re:Hypocrites by Anonymous Coward · · Score: 0

      Can't really call those things "forced" if you can reliably disable them.

      https://github.com/ghacksuserjs/ghacks-user.js

  25. Probably wouldn't work... by Anonymous Coward · · Score: 0

    Well, I'm pretty sure that Google, Facebook and others store the device IDFA in a cookie, they don't just rely on Apple's value.

    When the IDFA is rotated, they can see the old IDFA in the cookie and can reassociate the new IDFA with the old one.

    IDFA rotation would be pointless without a cookie clearance as well, which would annoy users as they would have to relogin to everything.

  26. Re: Or take matters into you own hands... by Anonymous Coward · · Score: 0

    Install linageos without gapps.sideload apps you want

  27. its 2019 by Anonymous Coward · · Score: 0

    You still use a web browser on a phone? How GAUCHE. It's 2019. Seriously.

  28. Apple isn't going to bother by sjbe · · Score: 2

    I think this is a very reasonable thing to do.

    Reasonable to you maybe. Not very reasonable to Apple. See below for why.

    Now that we have the government looking hard at all this data collection

    Which government are you talking about because it sure as hell isn't the US government. Maybe they are in Europe somewhere.

    now is the time for Apple to step up and do something like this to help out the end user.

    A nice sentiment but I strongly doubt Apple will actually do anything useful in this regard. Google derives the vast majority of their revenue from advertising so if Apple really wanted to stick it to Google, hurting their advertising revenue would be the way to do it. Thing is though that Apple and Google are sort of partners and Google pays Apple a reported $9 billion to be the default search engine so it's unlikely Apple cut off that revenue stream except as some sort of nuclear option.

  29. Well, that's a problem with payment systems. by Anonymous Coward · · Score: 0

    I mean, surely, you would prefer paying pennies for articles, if there were a transparent way that didn't involve much thought from you.

    So, your argument is a straw man, or it's a false dichotomy. "You'd rather be tracked than have your toenails pulled off, right?"

  30. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    The iPhone currently commands 13.2% of global smartphone market share, vs. 86.8% android market share. I'd hardly say that they "won the market share race".

  31. Re: Or take matters into you own hands... by Anonymous Coward · · Score: 0

    Good, we don't need shorty developers who do ad infested junk ware. I would gladly pay 1.50, 2, 6, even 60 dollars for a well written application. And yes, I've purchased mobile applications, the most expensive one was around 105 usd

  32. Transportation on 'izmir evden eve' by izmirevdenevee · · Score: 0

    as izmir evden eve team , we serve to our customers an amazing service. In our country there is lots of choice to move your flat but when you choised us , you'll see differences between others and izmir evden eve thank you so much

  33. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    Light Phone 2. Look forward to it when it comes out.

  34. Your theory breaks down by SuperKendall · · Score: 3, Informative

    A nice sentiment but I strongly doubt Apple will actually do anything useful in this regard.

    They already did.

    The iPhone used to offer a unique device ID that never changed, and was the same across all apps.

    But Apple realized that was being misused for tracking, so they changed the system (at a time Google was paying them to include Google as the search engine) so that advertisers could just get an advertising ID, that can in theory change any time.

    In fact the thing that really scratches your theory - any IOS user can reset the advertising ID manually any time they like, via the Reset Advertising Identifier feature under Settings->Privacy->Advertising.

    That was introduced in iOS6...

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re:Your theory breaks down by viperidaenz · · Score: 1, Informative

      An ID that can be changed at will isn't much different from a fixed one.
      Any app that has access to the ID and another form of state can track the change. So basically every single app installed on your phone when you make the change, or any app that requires some kind of user log-in.

      Your new IDFA will just be added to the same ad profile as your old one was. It's nothing but a false sense of power given to the user.

    2. Re:Your theory breaks down by gnasher719 · · Score: 1

      The iPhone used to offer a unique device ID that never changed, and was the same across all apps. But Apple realized that was being misused for tracking, ...

      It's stupid for another reason. People sell their iPhones. The UDID stayed the same if you sold your phone, it was literally the device that was tracked. And tracking isn't only used for advertisements, but things like games keeping track of high scores. So if you buy a new phone and sell your old one, someone else suddenly hss all your high scores.

      Whatever you think about tracking, the actual device is not what you want to track.

    3. Re:Your theory breaks down by kiwioddBall · · Score: 1

      Pointless though, advertisers will store the UDID in a cookie and thus will be able to reassociate the new UDID with the old one when the user resets it.

    4. Re:Your theory breaks down by kiwioddBall · · Score: 1

      and when I mistakenly said UDID I mean IDFA.

  35. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    I thought Firefox just logged all your traffic to Cloudflare? Do you trust them?

  36. Re:Or take matters into you own hands... by rahvin112 · · Score: 1

    There are plenty of Android phones you can buy with unlocked roms (Like Google's own pixel phones) that makes it trivial to install a clean ROM with no google integration.

    You could even pay someone to do it for you if you are terrified of flashing a ROM image.

  37. Re: Or take matters into you own hands... by Anonymous Coward · · Score: 0

    They have the dominant market share of customers who respond well to hype and 'image' things. Those are valuable eyeballs to capture. Android just has "the rest of us" (as the old Macintosh advertising phrase put it).

  38. Only an annoyance - other ways to fingerprint devs by JoeyRox · · Score: 1
  39. iPhone owners spend more by tepples · · Score: 2

    The iPhone currently commands 13.2% of global smartphone market share, vs. 86.8% android market share.

    Though the iPhone has a smaller user base, iOS users tend to have more money per user than Android users. Users of iOS spend more not only on paid apps and in-app purchases but also on physical products. (Source: "Survey: iPhone owners spend more, have higher incomes than Android users" by Robert Williams)

    And "global" reach matters little to an advertiser based in the United States who seeks to reach only viewers in the United States.

  40. I don't want an advertiser ID AT ALL by Anonymous Coward · · Score: 1

    Just saying, why not get rid of this antifeature entirely?

    Apple claims to be user-first, right?

    1. Re:I don't want an advertiser ID AT ALL by mr_lemonade4796 · · Score: 1

      Apple has to make money. I believe 'User First' is more like 'Investor First'

      Google is built on Advertising dollars, so to expect Apple to avoid those dollars is just crazy.

      Apple market evaluation has little to do with how much money they make, and has more to do with investor confidence. Apple's core products are selling less, and eventually that will lead to lower incomes from core products. That leads to lower investor confidence.

      Apple is looking to diversify and build services. Part of that will definitely be more tracking and more advertising.

      Apple needs to replace sagging iPhone sales with Services. It is their only way forward.

          -T-

  41. Credit card processor gets the lion's share by tepples · · Score: 1

    surely, you would prefer paying pennies for articles

    A 36 cent charge for an article means 31 cents would go to the credit card processor and a nickel to the publisher. How would you propose to improve the efficiency of micropayments?

    1. Re:Credit card processor gets the lion's share by viperidaenz · · Score: 1

      That's why you pay with bitcoin!
      Then the publisher gets the full 30c

      You get slapped with a $5 fee and have to wait 15 minutes while it clears, but don't worry about the details.

  42. Choice to pay or be tracked by tepples · · Score: 1

    Well, then make it Opt-In for everyone.

    "This article is available to subscribers. For a free day pass, opt in to all tracking providers."

    Tracking would default off. The article would display once the viewer makes a choice to pay or be tracked. Close the tab, click the next search result, and the next website would also offer the viewer a choice to pay or be tracked.

  43. s/incidental nonchalance/flagrante regalia by epine · · Score: 1

    Devilishly difficult to implement in practice, because what you are proposing is the elimination of all side channel information leakage from the browser to the web host.

    I don't think anyone reasonable is not proposing to eliminate all side-channels. 90% of the time, making this observation amounts to scope creep. What sensible people actually propose is to eliminate the fat side channels that are so plump and juicy that anyone who comes along could exploit them with incidental nonchalance.

    What you are aiming to do is minimize the fat channels, and leave only the thin channels, so that anyone who is entirely serious about exploiting this kind of information keeps a well-thumbed copy of Sun Tzu's The Art of Side Channel on his bedside table.

    It's almost impossible to pull of the innocent "who, me?" routine when thick editions of Side Channel Monthly are cascading onto your unkempt desk out of your unkempt in-basket, while you pour over unboxing your spanky new ACME Side Channel 9000 with 1938 festive das Blinkenlights.

    Once the multitudinous side channels become sufficiently thin, the jackbooted thug of maximum entropy analysis is forced to weave all the delicate threads back together again in full flagrante regalia. The threads can not be eliminated. But the weaver can be forced to possess 300 different lock picks, each and every one sourced from the Ruhr valley.

    1. Re:s/incidental nonchalance/flagrante regalia by Wrath0fb0b · · Score: 1

      What sensible people actually propose is to eliminate the fat side channels that are so plump and juicy that anyone who comes along could exploit them with incidental nonchalance.

      Would you believe there are people at Firefox/Chrome/Safari/Edge that are doing this right now? :-)

      What's more, remember that each such side channel is additive. So you don't need to find a particular fat one in order to whittle at privacy.

      The threads can not be eliminated. But the weaver can be forced to possess 300 different lock picks, each and every one sourced from the Ruhr valley.

      Of course, what you mean is that one person has to figure out and publish a paper, then the rest of the plebs just do an npm install.

    2. Re:s/incidental nonchalance/flagrante regalia by epine · · Score: 1

      It now occurs to me to add that anyone in possession of 1001 unscrupulous tools has his own nearly insuperable side-channel management issues, should he not want to advertise his arsenal of assholery far and wide.

      Little Red Riding Hood: Oh Granny, what a dark hoodie you've got!

      Little Red Riding Hood: Oh Granny, what a lot of 2FA dongles are sticking out through the hole in your hoodie pouch!

  44. oops by epine · · Score: 1

    "not" in the opening sentence was somehow left over from my immoderate first attempt. No good deed goes unpunished. My bad.

  45. Re:Or take matters into you own hands... by thegarbz · · Score: 1

    Advertisers are the problem, so you want to get rid of Apple.

    You're a dumbass.

    Actually he's my spirit animal. Coming up with more reasons to get rid of Apple is great pass time. For one all you *definitely paid for shills* who dare to say Apple isn't a problem (how much did the evil mega corp pay you to say that?) is another reason to get rid of Apple.

    There's kids starving in Africa. We should just dissolve Apple and buy each of them a nice t-bone steak.

  46. What's the point? by Anonymous Coward · · Score: 0

    Any app that is installed when you change it can track the change and associate the old idfa with the new one.
    Same goes for anything you log in to. The new ID will still be associated with your account.
    It's a ruse by Apple to make it seem like they care.

  47. Re:TRANSLATION (IMHO)!!! by Anonymous Coward · · Score: 0

    Yes!

  48. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    You want to kill millions of animals? You're a monster.

  49. Re:Seems pointless - actually you can reset it now by cjmnews · · Score: 1

    I reset mine at least 5 times a day. A game I play uses the ID to identify me to ads they play so I get in free game stuff.
    If I don't reset it, the ads don't play, because I already got my free stuff that day.
    If I reset it, I can see another set of ads, which play while I am doing something else, and get more free in game stuff.

    Settings->Privacy->Advertising there is a Reset Advertising Identifier button to do this.

    --
    You can lose something that is loose, so tighten the loose item so you don't lose it.
  50. Mozilla are unbelievable. by Anonymous Coward · · Score: 0

    Mozilla has been acting for years like some sort of Messiah while actually being the Devil. It's bizarre to see. They don't practice as they preach in any sense, yet constantly get praise (from themselves and from others). I hate this world and all of you.

  51. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    some way for publishers and advertisers to identify whether a user has already seen a particular ad

    No one can read minds. All you can verify is that the device downloaded that ad.
    Advertising is a nothing but a scam, and the victims are the ones actually paying the money!

  52. Re: Or take matters into you own hands... by Anonymous Coward · · Score: 0

    Comparing ios to android is silly. Compare Apple to Samsung.

  53. Re: Or take matters into you own hands... by Anonymous Coward · · Score: 0

    Feeding starving millions just creates starving billions. Humans reproduce exponentially in favorable conditions.

  54. Re:Or take matters into you own hands... by Anonymous Coward · · Score: 0

    Perfect solution. apple is shit