{"id":44143,"date":"2024-07-18T14:35:20","date_gmt":"2024-07-18T18:35:20","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=44143"},"modified":"2024-07-19T09:58:51","modified_gmt":"2024-07-19T13:58:51","slug":"safari-private-click-measurement-and-firefox-privacy-preserving-attribution","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2024\/07\/18\/safari-private-click-measurement-and-firefox-privacy-preserving-attribution\/","title":{"rendered":"Safari Private Click Measurement and Firefox Privacy-Preserving Attribution"},"content":{"rendered":"

John Wilander<\/a> (2021):<\/p>\n

\n

A new, on-by-default feature called Private Click Measurement, or PCM, for privacy-preserving measurement of ad clicks across websites and from iOS apps to websites in iOS and iPadOS 14.5 betas.<\/p>\n<\/blockquote>\n\n

This didn’t attract a lot of attention at the time, but now it’s getting some criticism<\/a> for being opt-out and somewhat hidden<\/a> in the settings. Apple words it as Allow privacy-preserving measurement of ad effectiveness<\/strong>, which is a bit confusing because it’s actually more private if you uncheck<\/em> this. The French<\/a> and Dutch<\/a> localizations are apparently even more confusing because without the Allow<\/strong> part it sounds like you are missing out<\/em> on privacy features if you don’t<\/em> check it.<\/p>\n\n

Actually, as far as I can tell, the benefit to checking the box is that it sends more<\/em> information to advertisers and that this improves the economics of content creation<\/a> while reducing the incentives for more intrusive tracking. If all browsers and sites are good citizens and support this, aggregate privacy should improve, even though at the micro level you are at<\/a> best<\/a> revealing more information in a way that doesn’t actually affect you.<\/p>\n\n

Now it’s big news because Firefox added a similar option.<\/p>\n\n

\nLokjo<\/a> (Hacker News<\/a>):<\/p>\n

Firefox is just another US-corporate product with an ‘open source’ sticker on it.<\/p>

Their version 128 update has auto checked a new little privacy breach setting.<\/p><\/blockquote>\n\n

Jonah Aragon<\/a> (Hacker News<\/a>):<\/p>\n

Less than a month after acquiring the AdTech company Anonym<\/a>, Mozilla has added special software co-authored by Meta and built for the advertising industry directly to the latest release of Firefox, in an experimental trial you have to opt out of manually. This “Privacy-Preserving Attribution” (PPA) API adds another tool to the arsenal of tracking features that advertisers can use, which is thwarted by traditional content blocking extensions.<\/p><\/blockquote>\n\n

Moritz Förster<\/a> (Hacker News<\/a>):<\/p>\n

What may sound good on paper does not go down well with many users for several reasons: Firstly, Firefox automatically delivers the Privacy-Preserving Attribution (PPA) with the update to the new version, despite the “experimental” label. More serious, however, is the fact that Mozilla also activates the feature directly - users must therefore deactivate the PPA manually by opting out.<\/p><\/blockquote>\n\n

Bobby Holley, Firefox CTO<\/a> (Hacker News<\/a>):<\/p>\n

\n

Most users just accept the defaults they’re given, and framing the issue as one of individual responsibility is a great way to mollify savvy users while ensuring that most peoples’ privacy remains compromised. Cookie banners are a good example of where this thinking ends up.<\/p>\n

Whatever opinion you may have of advertising as an economic model, it’s a powerful industry that’s not going to pack up and go away. A mechanism for advertisers to accomplish their goals in a way that did not entail gathering a bunch of personal data would be a profound improvement to the Internet we have today, and so we’ve invested a significant amount of technical effort into trying to figure it out.<\/p>\n

The devil is in the details, and not everything that claims to be privacy-preserving actually is. We’ve published extensive analyses<\/a> of how certain other proposals in this vein come up short. But rather than just taking shots, we’re also trying to design a system that actually meets the bar. We’ve been collaborating with Meta on this, because any successful mechanism will need to be actually useful to advertisers, and designing something that Mozilla and Meta are simultaneously happy with is a good indicator we’ve hit the mark.<\/p>\n<\/blockquote>\n\n

ozjimbob<\/a>:<\/p>\n

I think the issue I see is; this may well be a better way. But advertisers aren’t going to quit the arms race either, quit what they currently do and switch to this. They will use this but also continue the bloated, privacy-invading malware ads. So now we have two problems, not one.<\/p><\/blockquote>\n\n

See also: Thom Holwerda<\/a>.<\/p>\n\n

Previously:<\/p>\n