TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Building a more private web: A path towards making third party cookies obsolete

287 pointsby eh78ssxv2fover 5 years ago

25 comments

negusover 5 years ago
Yes this will have a great negative impact for Google&#x27;s adtech competitors who unlike Google do not have other means to spy on users such as Chrome, search engine, Accelerated Mobile Pages, Gmail, voice assistant and so on.<p>But Google really has no choice here due to aggressive campaign by Mozilla, Apple and Microsoft who boast with their Intelligent Tracking Prevention ( <a href="https:&#x2F;&#x2F;webkit.org&#x2F;blog&#x2F;8828&#x2F;intelligent-tracking-prevention-2-2&#x2F;" rel="nofollow">https:&#x2F;&#x2F;webkit.org&#x2F;blog&#x2F;8828&#x2F;intelligent-tracking-prevention...</a> ) implementation blaming Google as a company which does not value users privacy. Google would lose privacy-conscious users otherwise.<p>But it is clear for me how all this anti-thirdparty cookies situation will go further: server side third party ad trackers -- this will bypass Same Origin Policy and will pose a privacy and security threat for users and websites even more than todays third party frontend ad trackers.
评论 #22047077 未加载
评论 #22050003 未加载
评论 #22048509 未加载
评论 #22047081 未加载
评论 #22046903 未加载
评论 #22047763 未加载
zpetiover 5 years ago
I think this is an easy move for Google, it&#x27;s a &quot;strategy credit&quot; as Ben Thompson would put it.<p>Google already knows most of what it needs about you, and it will in the future from searches. It has no motivation to allow 3rd parties help in tracking visitors. This way it can build a moat around its business while pretending to care about privacy. It&#x27;s bullshit.
评论 #22046611 未加载
评论 #22050410 未加载
评论 #22046591 未加载
amlutoover 5 years ago
&gt; By undermining the business model of many ad-supported websites, blunt approaches to cookies encourage the use of opaque techniques ...<p>This is disingenuous. Reducing tracking does <i>not</i> undermine websites. It undermines advertisers that depend on tracking. If tracking stopped, advertisers would target something else (e.g. content or coarse location) and roughly the same amount of money would go to websites. Google’s privileged position would be a lot less inherently valuable, though.
hurricanetcover 5 years ago
&gt;By undermining the business model of many ad-supported websites, blunt approaches to cookies encourage the use of opaque techniques such as fingerprinting (an invasive workaround to replace cookies), which can actually reduce user privacy and control.<p>Sure. So how about we block fingerprinting? Oh waaaaaait I see. What you actually want is your privacy invading business model to not be impacted.<p>Why are sites able to ascertain the type of browser, operating system, OS version, webkit version, Safari version, time zone, language, platform, vendor, screen dimensions, plugins, etc.<p>This shit should be as locked down as location, web cam, and microphone. Block all of it.
评论 #22050033 未加载
phelmover 5 years ago
I have disabled 3rd party cookies in my browser for about a year now. My experience has been fine, I have had very few issues with things that I care about, no whitelist and not had to re-enable them yet.
评论 #22046804 未加载
评论 #22047024 未加载
评论 #22049106 未加载
评论 #22049113 未加载
评论 #22046690 未加载
Despegarover 5 years ago
&gt; Users are demanding greater privacy--including transparency, choice and control over how their data is used--and it’s clear the web ecosystem needs to evolve to meet these increasing demands. Some browsers have reacted to these concerns by blocking third-party cookies, but we believe this has unintended consequences that can negatively impact both users and the web ecosystem. By undermining the business model of many ad-supported websites, blunt approaches to cookies encourage the use of opaque techniques such as fingerprinting (an invasive workaround to replace cookies), which can actually reduce user privacy and control. We believe that we as a community can, and must, do better.<p>The Webkit team already proposed a privacy-preserving way to do ad click attribution [1]. I&#x27;m guessing that was too private and Privacy Sandbox works better for Google.<p>[1] <a href="https:&#x2F;&#x2F;webkit.org&#x2F;blog&#x2F;8943&#x2F;privacy-preserving-ad-click-attribution-for-the-web&#x2F;" rel="nofollow">https:&#x2F;&#x2F;webkit.org&#x2F;blog&#x2F;8943&#x2F;privacy-preserving-ad-click-att...</a>
jszymborskiover 5 years ago
In the past Chrome has played fast and loose with standards and features, which was fine for them since Firefox and friends needed to adopt them lest they widen the &quot;Only works on Chrom(e&#x2F;ium)&quot; gap.<p>I wonder how removing a feature might go, however. The answer is &quot;probably well because Chrome has overwhelming market share&quot;, but I do wonder if, between AMP and &quot;no URLs&quot; and no 3rd party cookies, if there&#x27;s room for a small but growing &quot;it just works how I&#x27;d expect it to on Firefox&quot; contingent to spring up...
评论 #22046990 未加载
评论 #22046565 未加载
jottoover 5 years ago
This will break a lot of auth0 jwt&#x2F;login default integrations since it depends on 3rd party cookies.
评论 #22047271 未加载
评论 #22053079 未加载
jkaover 5 years ago
There&#x27;s a short summary of some of the features proposed for the Privacy Sandbox here - <a href="https:&#x2F;&#x2F;blog.chromium.org&#x2F;2019&#x2F;08&#x2F;potential-uses-for-privacy-sandbox.html" rel="nofollow">https:&#x2F;&#x2F;blog.chromium.org&#x2F;2019&#x2F;08&#x2F;potential-uses-for-privacy...</a>
markosaricover 5 years ago
This will hurt the ad-tech businesses and websites&#x2F;publishers who rely on third-party ads&#x2F;targeting much more than it will hurt Google (and Facebook).<p>Still, Google&#x27;s revenue on third-party site ads was $6.4bn in Q3 of 2019 out of the $40.5bn in total revenue so it could be felt a bit there too.<p>I fear that it all will move to first-party tracking though which will be so much more difficult to block and so much more dangerous in terms of security.
rafaelturkover 5 years ago
Hard to read this and extract facts. My sense that this article is intentionally vague.
评论 #22046427 未加载
评论 #22046431 未加载
apeaceover 5 years ago
If anyone from Google is reading this, the new SameSite policies coming to Chrome 80 are breaking &quot;Login with Google&quot; functionality. I opened an issue here: <a href="https:&#x2F;&#x2F;github.com&#x2F;google&#x2F;google-api-javascript-client&#x2F;issues&#x2F;592" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;google&#x2F;google-api-javascript-client&#x2F;issue...</a>
pc2g4dover 5 years ago
The arms race moves to its next phase.<p>I&#x27;m not sure this will accomplish much as it&#x27;s not that hard to serve things from one&#x27;s own domain. More work for the tracking company to get things set up, I suppose, but harder to detect once established.
ryanmccullaghover 5 years ago
So now ad companies will just require a CNAME entry in the website&#x27;s DNS record.
评论 #22051061 未加载
Tepixover 5 years ago
For privacy conscious users who have blocked third party cookies for years, this may make evading tracking ever more complicated.<p>My guess is we will need custom GreaseMonkey scripts that prevent parameters from being appended to URLs so when you click on a link to another site it will not pass tracking information. Generally whenever a tracking network changes these parameters the Greasemonkey scripts will have to be updated whereas in the past you could just block the third party cookies and avoid a lot of the tracking.
bilekasover 5 years ago
There have been articles recently which are claiming the value of those cookies are not as valuable as before because the majority of them are avoided&#x2F;altered to obfuscate to the requester.<p>So I see this as a : &#x27;Hey we got in before everyone and stopped using cookies first&#x27; — When in reality, they&#x27;re becomming less of a valuable commoddity.<p>I&#x27;ll be very happy when companies stop storing excess info in their own storage.<p>Until then, no round of applause from me .
评论 #22046555 未加载
EGregover 5 years ago
What about single-sign-on stuff? What about iframe widgets where you are logged in?? Will there be a way to choose to keep being logged in, in iOS and Android? Or will everything become stateless and dumb?
评论 #22048552 未加载
评论 #22046341 未加载
awinter-pyover 5 years ago
a large chunk of G&#x27;s business is first-party ads, i.e. in their own SERP vs on someone else&#x27;s inventory<p>interesting to see if that&#x27;s the future. certainly anyone with substantial inventory has experimented with this (NYT for example) because they suspect they&#x27;re getting cheating by G&#x2F;FB
driverdanover 5 years ago
This is so two-faced. This is the key line:<p>&gt; Once these approaches have addressed the needs of users, publishers, and advertisers, and we have developed the tools to mitigate workarounds…<p>A browser vendor that cared about its users would make a browser for them, not publishers or advertisers. It would block all tracking garbage by default.<p>Just admit it Justin, the real Chrome customers are advertisers. You don&#x27;t actually give a shit about users if it interferes with ad dollars.<p>Edit: I left out this good quote<p>&gt; Some ideas include new approaches to ensure that ads continue to be relevant for users<p>More user-hostile advertiser appeasement.
评论 #22047351 未加载
评论 #22046891 未加载
评论 #22046926 未加载
评论 #22047369 未加载
评论 #22047222 未加载
评论 #22047746 未加载
评论 #22047008 未加载
评论 #22047396 未加载
npx13over 5 years ago
You care about users privacy? Judging by how passive aggressively Google tries to prevent us actually logging out of a Google Account, you are having a laugh.
sub7over 5 years ago
Good riddance. Unfortunately (almost) all our conversations - verbal and text messaging - are being spied on to target us with ads right now.<p>Addressing anything else is like pissing in the ocean to change it&#x27;s colour.
Scarbuttover 5 years ago
Looks like safari gave them no choice, so now they grab this as an opportunity to say the want to do it too.
评论 #22046329 未加载
评论 #22046404 未加载
exabrialover 5 years ago
I believe they&#x27;ll just be using the QUIC protocol and IPv6 to track users instead.
评论 #22048862 未加载
tboyd47over 5 years ago
It&#x27;s the classic regulatory capture move of pulling up the ladder behind you, only they don&#x27;t need regulators to do it.<p>What&#x27;s more, Firefox is just an off-brand of Google to capture the &quot;privacy first&quot; consumer market segment.<p>Doesn&#x27;t mean I&#x27;m going to stop using Firefox, but it just helps to see the big picture.
bilekasover 5 years ago
Another reason why Google&#x27;s concern here for our privacy is nonsense is if we look here :<p><a href="https:&#x2F;&#x2F;webkit.org&#x2F;tracking-prevention-policy&#x2F;" rel="nofollow">https:&#x2F;&#x2F;webkit.org&#x2F;tracking-prevention-policy&#x2F;</a><p>We can see, google doesn&#x27;t need to inform their chrome users :<p>&gt; A privileged third party is a party that has the potential to track the user across websites without their knowledge or consent because of special access built into the browser or operating system.<p>INOL but my understanding of this would put Google&#x27;s Chrome into that bracket. Potentially also Microsoft&#x2F;Apple ?