Security News > 2020 > January > Safari's 'Intelligent Tracking Protection' is misspelled, says Google: It should be 'dumb browser stalking enabler'

Safari's 'Intelligent Tracking Protection' is misspelled, says Google: It should be 'dumb browser stalking enabler'
2020-01-22 21:53

Google security researchers have published details about the flaws they identified last year in Intelligent Tracking Protection, a privacy scheme developed by Apple's WebKit team for the company's Safari browser.

Schuh expressed skepticism that Apple will be able to salvage ITP. "They attempt to mitigate tracking by adding state mechanisms, but adding state often introduces worse privacy/security issues," he wrote.

The techniques ITP uses to shield users from third-party tracking are trackable, Google says.

"As a result of customizing the ITP list based on each user's individual browsing patterns, Safari has introduced global state into the browser, which can be modified and detected by every document," the paper explains.

Though the paper discusses mitigations, which Apple applied with its patches in December, it contends that the ITP fingerprinting attack and and the ITP list exposure attack should still be possible.


News URL

https://go.theregister.co.uk/feed/www.theregister.co.uk/2020/01/22/apple_intelligent_tracking_protection/