Pierre Laperdrix

@dertypi Yes, this is something we plan on doing but we don't have a clear timeline for this at the moment.

@RockPartridge Are you also considering to do an iOS study in the future as well?

AmIUnique is starting a new adventure on mobile! 🎉📱 We have just launched our first Android application to study if users can be identified through an application without using a single permission. Link: play.google.com/store/apps/det… Retweets are greatly appreciated 😊

This application is a first step to investigate the fingerprintability of the mobile ecosystem. We plan on releasing another app similar to the AmIUnique.org website where you will be able to see how your own fingerprint compares to all the other collected fingerprints.

When you launch AmIUnique and tap "Scan my device", the application will collect your device fingerprint and display a selection of key attributes. Our goal is to analyse all the fingerprints we will receive to understand if the way Android is built can pose a privacy problem.

I'm looking for a postdoctoral/research associate to join my group at @NYUAbuDhabi in sunny Abu Dhabi! ☀️🏖️💻 Postdoc application: apply.interfolio.com/156376 Don't have a PhD? Apply to be a research associate: apply.interfolio.com/156377 Three good reasons to apply: 1/2

@nataliabielova @Inria Congrats! :)

🤩 Happy to announce that starting from today, I became a Research Director at @Inria! Research Director is similar to Full Prof. in academic system, and soon I'll be creating my own team! More news coming up! www-sop.inria.fr/members/Natali…

After several success iterations of SecWeb, @stecalzavara and I have decided that it's best for the Web community to merge with MADWeb, as we want to avoid fragmenting the community. So, please consider submitting to madweb.work (weather is nicer in San Diego ;-))

Google won't deprecate third-party cookies after all. This seems to be the worst outcome for me as heavy investment has been made in the past four years to develop alternatives that will now work alongside existing 3P cookies. Tracking will be more present on the web as a result.

Our paper on Server-side tracking will be presented by @Fouad__Imane at #PETS2024 on Thursday! Come say hi to her to know more! Unfortunately, I had to cancel my trip at the last minute 😢

@vtoubiana Looking at gs.statcounter.com/browser-market…, Safari seems to have lost about 4% share between May 2023 and May 2024. I'm guessing the browser choice screen imposed by the DMA may have increased the trend even more if Apple is willing to run a campaign on this.

Apple just started an ad campaign for Safari. First time I see one. What could be triggering this? #DMA

To finish, a big takeaway of our study is that there is a real need to look closer at server-side tracking because of the harm it can cause. After working 2+ years on this topic, it is hard to investigate because it was designed that way and it needs to be properly regulated.

The second problem is about the responsibilities and liabilities of the different actors in the data collection. Now that there is an additional intermediary server in the mix, who is responsible and liable for that? How can users exercise their rights to access their data?

For this study, we focused on detecting a small subset of SST servers. We relied on different crawls made in 2020 and 2022 to detect websites that shifted from the traditional tracking model to the server-side tracking one and found some websites that operated that change.

With Imane and Cristiana, we decided to tackle this subject in 2022 on both the technical and legal aspects. And wow, it is hard. Since its goal is to hide as much as possible on the server side, it really changes the way we do measurement studies as everything is opaque.

I'm super happy to announce that our paper on server-side tracking (SST) made with @Fouad__Imane and @Cristianapt was accepted at PETS! "The Devil is in the Details: Detection, Measurement and Lawfulness of Server-Side Tracking on the Web" PDF hal.science/hal-04617727v1… More info 🧵

On top of that, most of these intermediary servers are hidden as a first-party ressource through techniques like CNAME cloaking so that they can bypass ad blockers and not be affected by the upcoming third-party cookie depreciation. In short, it is a perfect privacy nightmare.

What is server-side tracking? Instead of the browser contacting directly different third parties, it only contacts a single server that dispatches tracking data to other third party servers. The catch? It is impossible to audit from outside as everything happens in the background

@nataliabielova @Inria Congrats!!!! This is well deserved!

Happy to share that I've been appointed the @Inria Senior Researcher position (Directrice de Recherche, DR2) as of today! I'll be building my own team and will support hiring a new Tenured Inria Researcher to join me! Drop me a DM or email me if you're interested!

I'm looking for a postdoc to join my group at @NYUAbuDhabi in sunny Abu Dhabi this fall! ☀️🏖️💻Apply here: apply.interfolio.com/145111 Three good reasons to apply: 1/2