45
Psylo iOS browser takes aim at digital fingerprinting (www.theregister.com)
submitted 1 year ago by to c/privacy@lemmy.ml
47 comments fedilink hide all child comments
 

Psylo, which bills itself as a new kind of private web browser, debuted last Tuesday in Apple’s App Store, one day ahead of a report warning about the widespread use of browser fingerprinting for ad tracking and targeting.

It was a fortuitous coincidence.

Psylo for iOS and iPadOS was created by Mysk, a Canada-based app biz run by software developers and security researchers Talal Haj Bakry and Tommy Mysk.

“Psylo stands out as it is the only WebKit-based iOS browser that truly isolates tabs,” Tommy Mysk told The Register. "It’s not only about separate storage and cookies. Psylo goes beyond that.

“This is why we call tabs ‘silos.’ It applies unique anti-fingerprinting measures per silo, such as canvas randomization. This way two Psylo tabs opening the same website would appear as though they originated on two different devices to the opened website.”

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 1 year ago* (2 children)

Still, it wouldn’t be in their interest to gather data

My sources say otherwise.. Apple has an interest in collecting your data.

What? You mean Android?

I know this is not really a thing where you come from, but here on lemmy we read the OPs text first before commenting, which also would have answered all your questions, but if you really need it: The Browser is based on Propriatery Apple Software and only runs on it

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 1 year ago

    I have read the article and honestly compared to others considering the times we live in it’s really not that bad (it is bad, don’t get me wrong).

    That said I really miss my Nokia 3210…

  • permalink
  • fedilink
  • source
  • parent
  • [–] -1 points 1 year ago* (2 children)

    My sources say otherwise.. Apple has an interest in collecting your data.

    It does for sure, but it will always be far less aggressive about it than Google. Most sensitive data is either stored in device and semi-handled there, or quickly deleted (although we know everything that goes to a USA server is likely stored forever)

    A lot of this data can be opted out on installation, which can’t really be said for Android iirc

    Android also runs Google play services and their other proprietary software with root access on your device, push the Play Integrity API which essentially locks out devices that don’t run their software with root access or dare to use non authorized roms (non authorized you say? Hmm.. really similar to Apple…)

    Both OS suck big time and I can only hope Android and Apple are freed from the BS done by their owners, and app devs finally stop discriminating users for caring about their data and privacy

    but here on lemmy we read the OPs text first before commenting, which also would have answered all your questions

    This went over your head. I know the post was about Apple and I was pointing out that android is likely worse for privacy

    I know this is not really a thing where you come from

    Personal attacks. You love to see it. Really shows the kind of person you are. Why opt for verbal violence and try to discredit me?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 1 year ago (1 child)

    GrapheneOS

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -3 points 1 year ago (2 children)

    It pretty much just sandboxes google play services. You still need to use it for many things and you can see it's deeply integrated in many places.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 1 year ago* (1 child)

    My main point is

    Android also runs Google play services

    is incorrect as a general statement about Android. I used GrapheneOS as an example but there are plenty of other Android ROMs that also don't come with Google Play Services or any Google at all.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -2 points 1 year ago (1 child)

    https://lemmy.super.ynh.fr/comment/363277

    you need to use (and install it) to use the vast majority of apps

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 1 year ago (1 child)
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -3 points 1 year ago* (1 child)

    You still lose access to notifications, and some apps straight up don't work (those using Play integrity, but not only)

    To be fair i've not tried fucking up with this too much but I know it's implemented in a lot of apps

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 1 year ago* (last edited 1 year ago) (1 child)

    To be fair i've not tried fucking up with this too much

    We could tell.

    Sorry, but what you are dismissing as "They only... You still... You lose..." is very ignorant.

    What the GrapheneOS team has achieved is technically impressive, sandboxing Google Play is something no other project has done yet, and now with Private Spaces you can essentially split your profile in two and decide which apps you want Google Play to run through, and which you don't.

    I put all the privacy intrusive apps in the private Space and installed Google services there, and I only open that space about once a week to keep in touch with some friends. The rest of the week I'm enjoying a fully degoogled phone using only FOSS apps and a bank that doesn't require Google services to be installed.

    The team deserves all the praise they get for building the most secure (and ironically, private) OS in the market right now, even with Google being so antagonistic to them. The phone is fully functional and we're definitely not living 10 years in the past.

    You should give it a proper try and form a facts-based opinion, or stop talking about it altogether.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -2 points 1 year ago* (1 child)

    Private spaces aren’t perfect, can’t run two version of a same app on different profiles

    What the GrapheneOS team has achieved is technically impressive

    Sure but it’s not nearly enough for me

    The phone is fully functional and we're definitely not living 10 years in the past.

    Not my experience with it

    You should give it a proper try and form a facts-based opinion, or stop talking about it altogether.

    That’s what I did and I hated it. So many small problems, things that took time:

    • Android carauto thing not working well or requiring specific permissions without really telling me how private this all is
    • having to install apps for basic things because the default provided ones are… really not great, including a keyboard that actually works with password managers and credentials auto completion
    • phone taking quite some time to start after updating because it’s optimizing apps or something, then optimizing apps again in background which eats the battery
    • having things not work because of play integrity
    • mobile NFC payment not working (Google Pay)
    • super frequent Android bugs when switching Google play accounts (is this specific to graphene or is it Google play that is fucked? I don’t know)
    • no way to reset or cheat the profile/unique advertising ID used for apps, so they can track you even after a reinstall (this really should be implemented. Advertising a privacy phone without that is sad)
    • google play having deep integration in most apps, like wtf I get a rating popup from google play? Was expecting better privacy, they essentially know most apps I’m on at all time
    • play store seems to know all apps on my phone, even those not installed through it?

    I probably forgot a lot. And yes, many problems are not specific to graphene but to custom ROM but that was my experience with it

    Also, I must stress that it was also my first experience with Android. Always have been an iOS user. I switched back.

    So yea, while having sandboxed is good, it’s still phoning home all the time

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 1 year ago* (last edited 1 year ago) (1 child)

    Hold on, you think GrapheneOS isn't perfectly private (and you'd be right, it isn't, and their main focus is security anyway) but you think iPhones are better?

    Why, because Apple told you it is? Because they have some gimmicks that sound good on paper but don't actually protect your data in any real way?

    Okay dude. Reach out to me whenever cus i got a bridge to sell you.

    Also, everything you said is incorrect, and so is your conclusion. But I don't think we'll ever see eye to eye on this so why bother.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -2 points 1 year ago* (1 child)

    I'll check the video, thanks for sharing

    Hold on, you think GrapheneOS isn’t perfectly private (and you’d be right, it isn’t, and their main focus is security anyway) but you think iPhones are better?

    I think Graphene without play services is a lot better than iPhones, and with play services, it's worse

    Why, because Apple told you it is?

    Because play services are deeply integrated into many apps, and Google is known for not E2EE anything and being an advertising company. They have an enormous interest in gathering as much data as possible for commercial purposes, while Apple likely only have a statistical interest for their business decisions

    A lot of what apple offers is wind and I'm aware of it, but having even a small thing is better than giving out your data to the monster that is Google.

    If you manage to sell me Android then congrats, because I fucking hate Apple but hate Android even more because of Google

    Do you believe a Samsung phone (or any authorized ROM with relatively good price/performance ratio) running with their provided OS for example would be better than an iPhone?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago* (1 child)

    No, I don't. Samsung and other authorized OEMs run stock Google services so there's no benefit to using them. Those devices are also substantially inferior to the Pixel in terms of security features anyways.

    The only phone I recommend is a Pixel with a properly set up GrapheneOS install, making use of profiles and private spaces depending on which apps you want to expose to Google Play Services/Framework, and which you don't.

    Ideally your most used profile is filled exclusively with FOSS or privacy-respecting apps that can run without Google services. And I'm talking about going really deep even on elemetary things like using an offline keyboard like Heliboard or FUTO that won't send everything you type to Google/Microsoft/Apple. Or using Gboard but with network access blocked.

    Yes, this set up takes time and some research, but it's the only way you can guarantee your data is properly split between what is just for you to see, and what others see.

    A device that is truly yours and not someone else's to mine for data and spy on you, possibly getting you in trouble in the future when a government demands your data from Google/Apple.

    But if you're not willing to put in the work to set it up, then I don't recommend any other Androids. Stay on iPhone instead.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 1 year ago

    Alright, thanks for your answer. That was my reasoning for everything: I didn’t believe running graphene was usable because it wasn’t for my use case, and I assumed it would be the case for everyone (wrongly obviously, although we’re on Lemmy so people here and on this community are probably more tech savvy)

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 1 year ago (1 child)

    False.Graphene does not have Gservices installed by default

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -2 points 1 year ago* (2 children)

    Did I say it did? Maybe I worded it wrong but I meant that you need to use (and install it) to use the vast majority of apps, and it's deeply integrated, in the play store and apps.. and affects many parts of android

    If you do install it, which you probably will unless you're okay with living 10 years in the past and losing time, then you're pretty much back to square one

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 4 points 1 year ago (1 child)

    If you do install it, which you probably will unless you’re okay with living 10 years in the past and losing time, then you’re pretty much back to square one

    Non-sandboxed play services have vastly more permissions and access to device information; it's a step back from not having it, but utterly disengenuous to call it back to square one. It has far more privileged permission, and as you admit yourself, we don't know what is in its code, so we don't know what it is potentially doing with that permission.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago* (1 child)

    I'm typing this via GrapheneOS and I don't at all feel like I'm living 10 years in the past lol.

    Even if I was, at least the internet would be a less shitty place than it is now, there would be almost no LLM/AI crap, I wouldn't constantly have to be as vigilant against big corps datamining my privacy as much as I am now.... Actually, 2015 was a pretty decent time compared to now. Got a time machine?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 1 year ago* (last edited 1 year ago) (1 child)

    but it will always be far less aggressive about it than Google

    Whataboutism. Browser advertises itself as privacy respecting, yet builds on a non Privacy respecting OS. If they really wanted to protect the user, they would be open source, (at least the methods of protecting the user from tracking) firefox based and availible for linux and Android FOSS, similar to everything else (Firefox, Molly, Signal, etc). My whole Comment was about how they advertise themselves as Private, yet fail to address the most basic privacy concerns, essentially being an oxymoron. This was not about „which OS is less evil“ but „why did they not opt for the not at all evil?“

    Android also runs Google play services

    False. AOSP does not have Gservices, and has enough forks for hardware (Linaege, Graphene, Calyx, /e/)

    Both OS suck big time

    See my point about AOSP.

    I know the post was about Apple

    So you just posted some random comment just because?

    and I was pointing out that android is likely worse for privacy

    Also false, see my Point about AOSP.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -3 points 1 year ago* (1 child)

    yet builds on a non Privacy respecting OS

    What would be the alternative? Android is also a non privacy respecting OS and is even worse.

    firefox based and availible for linux and Android FOSS

    That's nice, but no one uses android FOSS and everyone is using google play services. Firefox is also not very privacy respecting but that's out of the subject anyways.

    False. AOSP does not have Gservices, and has enough forks for hardware (Linaege, Graphene, Calyx, /e/)

    Yes, and it's not usable for your everyday life. Enjoy running less than 10% apps on the market. All forks add Google Play services support because it's pretty much mandatory nowadays.

    So you just posted some random comment just because?

    I'm just going to write again what I wrote

    This went over your head. I know the post was about Apple and I was pointing out that android is likely worse for privacy

    because you made it seem like Apple was a bad solution and as there's only android left, you made it seem like it was privacy respecting

    Also false, see my Point about AOSP.

    I disagree, see my point about AOSP too

    btw google are making aosp harder to use now, see grapheneos's post

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago (1 child)

    All of your Points are either already answered by me, ad hominem, or random assumptions without data backing it up.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -4 points 1 year ago* (1 child)

    random assumptions without data backing it up

    Be my guest, uninstall GPServices and see. It's known that all mainstream apps require it. Things like youtube obviously, and all google apps, uber, lyft, reddit, bank apps, discord (unsure), mcdonalds, burger king, yuka... many smaller apps and many games as well. If they work by luck, then you likely won't have notifications. There's no easy database for this and you probably know it

    Then, for the privacy points, then you also know google's privacy policy. Google play services is closed source, so yea, good luck finding proof for this, just like for apple

    ad hominem

    where? Criticizing something specific inherently implies there is a better alternative, or you wouldn't be focused specifically on apple. I'm saying android is not and AOSP is not viable due to being an outdated user experience and supporting much much less apps and features, as well as not really being used without play services

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 1 year ago (1 child)

    Be my guest, uninstall GPServices and see

    Never had it installed in the first place.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 0 points 1 year ago (1 child)

    no bank apps? no google maps? no fast food or taxi app? no 'mainstream' social media? that's your only phone?

    You're one of rare people then. I couldn't do it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago (1 child)

    where? Criticizing something specific inherently implies there is a better alternative, or you wouldn’t be focused specifically on apple. I’m saying android is not and AOSP is not viable due to being an outdated user experience and supporting much much less apps and features, as well as not really being used without play services

    Your whole comment is hinging pretty hard on the AOSP point, as that's almost definitely the alternative the user was referring to.

    no bank apps? no google maps? no fast food or taxi app? no ‘mainstream’ social media? that’s your only phone?

    The only ones there that are anywhere close to essential are banking and Google Maps. Maps has alternatives that I've seen people use as well, such as Organic Maps. More importantly is most of these can be done in a single app, a web browser.

    I've done both app and phone browser banking, and they're pretty interchangeable, just set up site shortcuts on your home screen instead. Similar to fast food, I don't use taxis. Social media is the main offender here but most mainstream social media sucks dick.

    Why do you need these things as apps?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    I've done both app and phone browser banking, and they're pretty interchangeable, just set up site shortcuts on your home screen instead

    Won’t work for things like neobanks (revolut, n26, trade republic, sumeria)

    Also many banks have a disastrous web interface in my country, and card 2FA is sometimes only done on the app for internet payments

    I know not having the app makes me unable to get Burger King offers, or use the Yuka app, both of which I really need

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 1 year ago (1 child)

    Won’t work for things like neobanks (revolut, n26, trade republic, sumeria)

    Ya know, fair enough there ngl, I forgot about those and it definitely makes a difference if you're reliant on an app.

    Also many banks have a disastrous web interface in my country, and card 2FA is sometimes only done on the app for internet payments

    Yeah, not much can be done about bad web design. I found that me during a period abroad, it was a worthwhile compromise, but sometimes it can be brutal to deal with.

    I know not having the app makes me unable to get Burger King offers, or use the Yuka app, both of which I really need

    Gotcha, but in that case, it's effectively them bribing privacy concessions from you. That's part of the payment trade-off there.

    I don't really disagree with your points here; it highlights the importance of threat modelling. On a country-by-country basis, things may be far easier or harder. For example, when I was in Japan, I used fewer privacy-questionable apps due to less cultural and technological impetus than I have in the States. The differences you're having issues with are likely heavily based on both infrastructure and value differences between much of the comm and you. I frankly make many privacy compromises compared to others here myself, but that is less do to the alternative being backwards but more so due to it being ever so slightly more inconvenient.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 1 year ago*

    I believe you got it right. There’s an important part of me but it’s clear that it’s not ready for mainstream use due to too many edge cases

    I know it made it really annoying for me to hear that X OS works nice and stuff when I didn’t have the same experience at all because I wasn’t willing to make the same compromises

    I still believe this should be highlighted more. I feel that is talked about in the Windows vs Linux debate but pretty silenced when it comes to Normal vs Custom phone ROM, where I believe the problems are indefinitely harder to solve

  • permalink
  • fedilink
  • source
  • parent