Google's new proposal has 'significant' privacy problems: Mozilla

On Thursday, Firefox published the results of an analysis of Google's Federated Learning of Cohorts, or FLoC, proposal. Google believes the new "privacy-preserving" system could be used to replace third-party cookies for ad tracking purposes. Firefox CTO Eric Rescorla said there are major privacy problems with the system, GSMArena reported on Friday.

Google's new proposal for targeted ad tracking has several properties that could pose "significant" privacy risks to users, according to Firefox maker Mozilla.

On Thursday, Firefox published the results of an analysis of Google's Federated Learning of Cohorts, or FLoC, proposal.

Advertisement

Google believes the new "privacy-preserving" system could be used to replace third-party cookies for ad tracking purposes.

Firefox CTO Eric Rescorla said there are major privacy problems with the system, GSMArena reported on Friday.

Advertisement

ALSO READ | FB introduces new chat themes, payments in Messenger

FLoC works by using a new "cohort" identifier. Compared to cookies, "cohorts" identify a group of users with similar interests instead of a single person.

Advertisement

Advertisers can then use these cohorts for ad tracking purposes without needing the browsing history of a specific user.

However, cohorts will likely only consist of thousands of users. That could allow trackers to narrow down specific users very quickly, Rescorla wrote.

Advertisement

For example, tracking companies could use browser fingerprinting to narrow down the list of potential users in a cohort to just a few. Firefox says trackers would only need "a relatively small amount of information" when combined with a FLoC cohort.

ALSO READ | TECNO unveils most affordable 48MP dual-rear camera smartphone 'SPARK 7T'

Advertisement

Additionally, trackers could use combinations of FLoC IDs in a given timeframe to distinguish individual users. That's because neither FLoC identifiers nor user interests are constant.

FLoC identifiers also leak more information than cookies. Unlike site-specific cookies, FLoC IDs are the same across websites. Because of that, "they become a shared key to which trackers can associate data from external sources".

Advertisement

Google has proposed several countermeasures to mitigate these privacy problems, including making FLoC opt-in for websites and suppressing cohorts that it believes are too connected to "sensitive" topics.

However, Firefox believes they're not enough.

Advertisement

tags
Advertisement