Today the Brave research team shared details on their new DiStefano protocol, which allows users to share trusted encrypted facts as zero-knowledge proofs while preserving privacy.
Google Chrome's proposed "Related Website Sets" (RWS) feature will further undermine Chrome users' privacy.
RWS allows companies to track you across sites without your knowledge.
If two sites are owned by the same organization, Chrome will allow third-party cookies between them.
This would let Google link YouTube videos you watch to your Google profile, even when you’re not logged into YT, and even after third-party cookies are deprecated in Chrome.
Google justifies RWS by saying that users expect two sites owned by the same company to share data.
However, a study we conducted with @univofstandrews, @imperialcollege, and @hkust showed that users can't consistently tell if two sites are related: brave.com/blog/related-w…
Many browsers now block third-party cookies, which are primarily used to track users across the Web and collect data for targeted advertising.
One way that websites get around this privacy protection is with a sneaky method called bounce tracking.🧵
First-party cookies are the key to bounce tracking.
They're set by the site you're currently using, unlike third-party cookies which are set by different websites.
1P cookies are typically benign. For example, an online store uses them to remember what's in your shopping cart.
Blocking first-party cookies can break some sites or at least make them function less smoothly. That’s why browsers generally allow first-party cookies by default.
Bounce tracking exploits the fact that you’re probably not blocking first-party cookies.
It can be tempting to use a free VPN. Why not get the benefits of the service without paying for a subscription?
However, free VPNs can be ineffective or even dangerous.
Here's why... 🧵
1) Privacy risks ⚠️
Free VPN providers aren't making money from users so they have to find other means of revenue. Typically, this means that they're collecting user data and selling it to third parties.
User data stored by VPN providers is also vulnerable to data breaches.
2) Slower speeds 🐢
Free VPNs generally have fewer servers and invest less in their network infrastructure, which results in overcrowding and slower speeds.
Furthermore, free VPNs often have bandwidth/data limits that also hinder your connection.