"uBO is now equipped to deal with third-party disguised as first-party as far as Firefox's browser.dns allows it," Hill wrote, adding that he assumes this can't be fixed in Chrome at the moment because Chrome doesn't have an equivalent DNS resolution API.Īeris said, "For Chrome, there is no DNS API available, and so no easy way to detect this," adding that Chrome under Manifest v3, a pending revision of Google's extension platform, will break uBO. Firefox supports an API to resolve the hostname of a DNS record, which can unmask CNAME shenanigans, thereby allowing developers to craft blocking behavior accordingly.
Two days ago, uBlock Origin developer Raymond Hill deployed a fix for Firefox users in uBlock Origin v1.24.1b0. The technique is also discussed in a 2010 academic research paper, "Cookie Blocking and Privacy: First Parties Remain a Risk," by German Gomez, Julian Yalaju, Mario Garcia, and Chris Hoofnagle. Using DNS records to make a third-party domain appear to be first-party was documented previously in a 2014 paper by Lukasz Olejnik and Claude Castelluccia, researchers with Inria, a French research institute. Mozilla says Firefox won't defang ad blockers – unlike a certain ad-giant browser READ MORE Aeris added that DNS delegation clearly violates Europe's GDPR, which "clearly states that 'user-centric tracking' requires consent, especially in the case of a third-party service usage."Ī recent statement from the Hamburg Commissioner for Data Protection and Freedom of Information in Germany notes that Google Analytics and similar services can only be used with consent. In a conversation with The Register, Aeris said Criteo, an ad retargeting biz, appears to have deployed the technique to their customers recently, which suggests it will become more pervasive. As Eulerian explains on its website, "The collection taking place under the name of the advertiser, and not under a third party, neither the ad blockers nor the browsers, interrupt the calls of tags." But wait, there's moreĪnother marketing analytics biz, Wizaly, also advocates this technique to bypass Apple's ITP 2.2 privacy protections.Īs does Adobe, which explains on its website that one of the advantages of CNAME records for data collection is they " you to track visitors between a main landing domain and other domains in browsers that do not accept third-party cookies."
0 kommentar(er)
