twit.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
The official Mastodon of the TWiT Podcast Network

Administered by:

Server stats:

1.4K
active users

More on and the and implications from people who are smarter than me, check out the discussion on the podcast by @leo Laporte and (the latter is not on Mastodon).

You can read and search the episode transcripts on Steve's website. Start with Episode 935, "TOPICS" ARRIVES. grc.com/securitynow.htm

/1

www.grc.comGRC | Security Now! Episode Archive  Security Now! Weekly Internet Security Podcast. This week describing the newly revealed SockStress TCP stack vulnerabilities.

Full disclosure: @leo administers the Mastodon instance I belong to, which is associated with the podcast network that is on. I'm a donor to the podcast network. Nobody asked me for a recommendation though.

/2

As for @leo and they frequently engage with issues surrounding and

They *really* know how user tracking works and all the ways in which we are tracked.

Steve in particular is a big fan of and adblockers (so am I). This podcast has turned me on to a lot of privacy-preserving tools that I now use regularly and recommend to other people.

/3

and @leo are also kind of ambivalent about and what it does with and its power more broadly - although sometimes it uses its power to push for wider adoption of best practices all over the web and in the industry.

If you really want to keep up on what is doing and whether it's good, bad, ugly, or all of the above, they're good people to consult.

/4

So it's significant that @leo and who are fanboys and adblocking evangelists have a broadly positive take on (they still prefer Firefox!).

They suspect that Google sees the writing on the wall. As demands for online grow louder and legislation follows, Google wants to be prepared, so they're working on a compromise.

/5

tracking and associated and brokering at this point basically creates a dossier on our whole lives that includes where we have lived, who we associate with, our sensitive personal health information, and our sensitive personal financial information.

If/when new laws and regulations in the medium term make this unfeasible, wants to be prepared.

/6

The preparation is making for a future crackdown on invasive tracking and data mining is something like which doesn't compile a dossier but instead asks:

"What has this device's browser/app activity indicated a general interest in during the last three weeks?"

Which is a lot less invasive, generally.

/7

Misuse Case

So if you are:

A queer, pregnant woman living in Dercatur, IL who runs a business restoring old cars, likes folk music, and recently came into a small inheritance that's tied up in probate

Current (probably) knows all this about you. Eek!

All will know about you is that you like antique/classic cars and folk music, not anything about your sexual orientation, your pregnancy status, or your money situation. By design.

/8

The idea, hopes, is that will survive privacy legislation that bans "compiling a dossier" style

They are piloting it now to see if it works. Because of Google's dominance over the browser ecosystem with and over online advertising generally, they're the only entity in a position to do something like this.

/9

@leo and (and I) strongly suspect that this is a long-term survival thing for . I would say that it's mitigating a future statutory, regulatory, and/or reputational risk because I am a and nerd.

/10

That said if you still want to switch to , go ahead and do so.

If you make the switch to Firefox or area already doing so, make sure to use plugins like EFF's PrivacyBadger and some kind of adblocker like UBlock Origin. Also turn on Private Browsing Mode.

Use a good password manager like BitWarden or 1Password.

And consider a solid VPN such as ExpressVPN.

mozilla.org/en-US/firefox/feat

/end

MozillaFirefox private browsing mode

@MisuseCase thanks for the write up / summary. I pretty much agree with this point of view. Another view; we know how the topic list looks now. How will that change in the future (it will change)?

The topic information from the API (that will be freely available to anyone that asks the browser) together with other known information about a user may reveal be enought to put 1+1 together. The topic information may also be stored and used for a more extensive profile by sites you visit often.

@haagen Google’s spec talks about how things might be added to the Topics list in the future (basically by industry/professional association committee review process).

The underlying protocol is supposed to make your topic history ephemeral, I am not totally sure how that’s guaranteed TBH. But most of it relies on the client/browser, which, if it’s Chronium based, is under Google’s control. So if they find some flaw or abuse they can do something about it. /1

@haagen As for deriving sensitive information from combinations of non-sensitive information, this is always a potential problem, and the nature of the topics themselves is meant to mitigate this risk. So is the proposed review process for adding new topics.

And the feature that throws random topics into the mix every so often.

/2

@haagen It deliberately leaves out things that can point to personally identifiable information or health information - “heath and wellness” is a topic, generalized and purposefully broad.

There is nothing about one’s location, age, or financial status.

It’s hard to pinpoint anyone with a combination of any of these, by design.

/end