Steven Englehardt

Originally reported in #989, but I noticed it myself while playing around with some crawl data recently. The problem stems from the listener we're using to record DNS entries. https://github.com/openwpm/OpenWPM/blob/ab5fac2d7b81f9b05704bd7460b3b20aa8f23f7b/Extension/src/background/dns-instrument.ts#L29-L44...

How to ensure we capture all identifying information exposed to sites?

3

We can measure the total amount of identifying information from simple APIs, such as `window.screen.height` or `navigator.maxTouchPoints`, by simply querying these properties across our user base. The approach is less...

A privacy budget may not prevent identifiability for all clients

1

Consider a hypothetical API that returns the same value for 95% of users and a unique value for each of the remaining 5% of users. If we use the entropy...

This proposal should define what is meant by a "sensitive category"

1

In order to evaluate how well we expect FLoC to be able to prevent leaks of “sensitive” categories, we first need to first agree on our definition of sensitive. Are...

This proposal makes false claims about the privacy properties provided by the anonymization techniques used

1

> Useful by collecting people with similar enough interests and producing labels suitable for machine learning, and private by forming large clusters that don't reveal information that's too personal, when...