San Francisco, June 11
Google's new proposal for targeted ad tracking has several properties that could pose "significant" privacy risks to users, according to Firefox maker Mozilla.
Google believes the new "privacy-preserving" system could be used to replace third-party cookies for ad tracking purposes.
Firefox CTO Eric Rescorla said there are major privacy problems with the system, GSMArena reported on Friday.
FLoC works by using a new "cohort" identifier. Compared to cookies, "cohorts" identify a group of users with similar interests instead of a single person.
Advertisers can then use these cohorts for ad tracking purposes without needing the browsing history of a specific user.
However, cohorts will likely only consist of thousands of users. That could allow trackers to narrow down specific users very quickly, Rescorla wrote.
For example, tracking companies could use browser fingerprinting to narrow down the list of potential users in a cohort to just a few. Firefox says trackers would only need "a relatively small amount of information" when combined with a FLoC cohort.
Additionally, trackers could use combinations of FLoC IDs in a given timeframe to distinguish individual users. That's because neither FLoC identifiers nor user interests are constant.
FLoC identifiers also leak more information than cookies. Unlike site-specific cookies, FLoC IDs are the same across websites. Because of that, "they become a shared key to which trackers can associate data from external sources".
Google has proposed several countermeasures to mitigate these privacy problems, including making FLoC opt-in for websites and suppressing cohorts that it believes are too connected to "sensitive" topics.
However, Firefox believes they're not enough.
Disclaimer: This story was supplied by an external content provider; we do not endorse or accept responsibility for its accuracy, completeness, or any outcomes from relying on it. It is for informational purposes only and does not constitute legal, financial, medical, or other professional advice. Laws and regulations vary and may change; readers should verify accuracy and compliance with local requirements and consult a qualified professional for tailored guidance.