HackerPapers

arXiv:2001.07421cs.CR

Information Leaks via Safari's Intelligent Tracking Prevention

Artur Janc, Krzysztof Kotowicz, Lukas Weichselbaum, Roberto Clapis

Abstract

Intelligent Tracking Prevention (ITP) is a privacy mechanism implemented by Apple's Safari browser, released in October 2017. ITP aims to reduce the cross-site tracking of web users by limiting the capabilities of cookies and other website data. As part of a routine security review, the Information Security Engineering team at Google has identified multiple security and privacy issues in Safari's ITP design. These issues have a number of unexpected consequences, including the disclosure of the user's web browsing habits, allowing persistent cross-site tracking, and enabling cross-site information leaks (including cross-site search). This report is a modestly expanded version of our original vulnerability submission to Apple (WebKit bug #201319), providing additional context and edited for clarity. A number of the issues discussed here have been addressed in Safari 13.0.4 and iOS 13.3, released in December 2019.

arXiv comments
Journal reference
DOI
Subjects
cs.CRCryptography and Security

On Hacker News

Linked by 2 identifiable commenters in 2 comments across 2 threads, from Jan 2020 to Jan 2020. Found in 1 HN submission from Jan 2020 to Jan 2020. Open submission discussions.

Comments linking this paper, per year.

Discussed in comments2 threads

  1. Google researchers find serious privacy risks in Safari’s anti-tracking system 1 comment

    • The PDF of the findings is here: https://arxiv.org/pdf/2001.07421.pdf The way the anti-tracking is worked around is to... use the anti-tracking very intentionally. It's pretty clever. Apparently Apple has addressed a number of the techniques, but I'm sure more will surface. The…

      codezeroView on HNParent context

  2. Apple’s privacy software allowed users to be tracked, says Google 1 comment

    • Here's the arxiv paper this article is reporting on, it's a short 6 page read: https://arxiv.org/pdf/2001.07421.pdf Basically Safari keeps track of which domains are being requested in a 3rd party context (i.e. I load example.com in my browser and the page loads the facebook sdk…

      arkadiytView on HNParent context

Submitted to Hacker News

Connected through shared HN threads, not inferred similarity or a recommendation.