upvote
And also without logging it. Even if I don’t want popups to give consent for every document.getEyeColor() call, it would be nice go back and see who’s doing which queries and/or have Firefox collect aggregate statistics. Naming and shaming the crooks won’t stop them but it might have an impact on curbing any bad behavior from big commercial retailers.
reply
I like this idea a lot. It’s similar in principal to how macOS shames battery hog apps in its battery menu extra.
reply
It's a UX trade off. For non-adversarial websites it's very convenient for users because things just work without having to go through loads of permissions pop ups for every website, but of course this then makes this info a juicy target if you're trying to fingerprint someone.
reply
It's not a tradeoff, it's poor design.
reply
But it is a design trade-off. The opposite case can be seem in the many websites asking to send you notifications, and the many flavours of cookie notices. When you have to ask the user permission to do anything and everything, the user gets annoyed and desensitized. They start allowing everything (my always collects dozens of notification-enabled websites if given the chance), and the point of asking for permission is lost.
reply
> It's not a tradeoff, it's poor design.

How so? There seems a fairly inherent tension between having things just work by default and hiding surface area for fingerprinting behind permissions pop ups. For example say you go to a maps website, how do you decide whether to share the users location with the website? Or enable webGL functionality to render some fancy layout on the screen? As a user having to enable all that stuff per-website is annoying.

Maybe there's some other way Im missing?

reply
Is it though?

Google's business model has been ads from the beginning. Search, gmail, drive, office, chrome, everything they do is just to drive ad revenue further.

They don't care about the user. Never have, and never will.

And the outcome we are seeing is what happens when a defunct state isn't able to protect citizens from conglomerates. That's what the Kartellamt or the FTC is supposed to be for.

reply
Nope. At least until 2008 I cared and Larry and Sergey cared quite a bit.
reply
Yes, I believe they initially really meant it when making their “don’t be evil” statement.

The company as a whole also really stopped caring at some point and are now following the “do be evil” paradigm

reply
So "never have" might not be true. But what about the rest of the comment?
reply
> Nope. At least until 2008 I cared and Larry and Sergey cared quite a bit.

Not sure if I can't see this comment as anything else than hypocritical. It's always easier on the money receiving side, isn't it? How do you think the term malvertisement came to be?

AdMob is kind of the definition of inevitable Surveillance Capitalism and the prime example for necessary regulation through government.

reply
That's not a browser thing. Fingerprinting native apps is much easier.
reply
Sure, but at least native apps can only do that if I download and install them. If I do that, I’ve made a conscious decision that the tradeoff is worth the utility of the app. This limits the blast radius considerably.

On the web one is drive-by fingerprinted by sites they never once approved of or intended to visit thanks to the browser’s ability to redirect and embed without input from the user. The magnitude of the problem is far greater on the web.

To reframe it, in a given week the average person only uses a small handful of apps, but in the same span of time their browser has connected to thousands, maybe tens of thousands, of unique domains, most of which are tracking them in some capacity and the majority of which are tracking things most of us would consider invasive.

reply