Re: Firefox-128 "Privacy-Preserving Attribution" and distribution defaults

On 22/07/2024 15:32, Joonas Niilola wrote:
> So far I've only seen Alpine toggling this option off with their Firefox
> package.

Alpine maintainer for Firefox here - I looked through the Firefox 
codebase, and it looks like the API becomes a no-op when disabled[1].

While Mozilla has also posted that the API isn't available for anyone 
other than themselves yet, the somewhat oddly motivated explainer posted 
by them[2] (i.e. "The value that an advertiser gains from attribution is 
enormous." and "Meta famously reported USD10 billion of losses"[3]), as 
well as multiple[4][5] concepts of attacks posted under the original 
PATCG proposal made me feel like disabling it was the right choice - 
especially since (for now?) it doesn't do anything other than just send 
more data to Mozilla+ISRG.

[1]: 
https://searchfox.org/mozilla-central/rev/318994c335b17ed02629792021e076bc0fe00145/dom/privateattribution/PrivateAttribution.cpp#59
[2]: 
https://github.com/mozilla/explainers/tree/main/ppa-experiment#end-user-benefit
[3]: https://github.com/mozilla/explainers/issues/12
[4]: https://github.com/patcg-individual-drafts/ipa/issues/57
[5]: https://github.com/patcg-individual-drafts/ipa/issues/77

-ptrc