zlacker

[return to "Google employee responds to negative feedbacks on WEI"]
1. haburk+Nm[view] [source] 2023-07-26 18:50:23
>>luag+(OP)
Amazingly clever that they have hold backs! Make sure to read this before going along with the anti WEI train

> WEI prevents ecosystem lock-in through hold-backs

> We had proposed a hold-back to prevent lock-in at the platform level. Essentially, some percentage of the time, say 5% or 10%, the WEI attestation would intentionally be omitted, and would look the same as if the user opted-out of WEI or the device is not supported.

So this avoids the DRM or blocking certain browsers issue. Brilliant. I’m not entirely certain but I think this avoids the main issues which people had with the proposal.

I still think a lot of people will not read this and react with vitriol but I would like to expect more from hacker news, as a forum where people don’t simply downvote opinions they disagree with.

◧◩
2. danShu+R01[view] [source] 2023-07-26 21:34:48
>>haburk+Nm
I've commented in more detail elsewhere (>>36885174 ) but I don't understand how holdbacks solve anything about this issue; if anything they make me more skeptical of Google's motivations.

The TLDR is that I don't see how I'm supposed to believe that this discourages sites from using invasive fingerprinting techniques if those sites are essentially required by holdbacks to still have those invasive fingerprinting techniques at the ready: and 1 in 10 requests even from a browser that implements WEI will still be subjected to those fallback techniques, so your browser/device is still basically guaranteed to be fingerprinted by any site you visit regularly.

You can't discourage the development of something and require it at the same time.

And if the experience of non-participating browsers is so much worse that it's obviously better to implement WEI, then we're right back to the same DRM and competition questions that we had before.

If holdbacks are rare enough that sites can ignore them (or statistically filter them out and determine if a browser actually implements the spec), then those sites don't need to have a fallback mechanism and we're right back to DRM. However, if holdbacks are common enough that sites can't ignore them (and if they can't statistically determine whether or not holdbacks are holdbacks or a non-implementing browser), then everyone is still going to be subjected to the fallback techniques that Google says it's trying to discourage.

[go to top]