Intelligent Tracking Prevention (ITP) detected some issues regarding Apple’s anti-tracking system. The Machine Learning Classifier is part of Google’s security team and one of the most highly regarded privacy protection kits for the web around the world.
Google brought all these flaws to Apple’s attention back in August last year, and by December, some of these issues have been rectified. Several faults identified by Google’s ITP consist of the Safari browser allowing third-party websites to track users’ browsing information.
What does ITP do?
The ITP system incorporates a machine-learning model to assess which privately controlled domains can track users across different websites. This model blocks third-party cookies by default and clears out first-party cookies regularly, which, in other words, helps to prevent the advertisers from tracking users. Apple has got rid of this system back in 2017.
Without providing any details regarding the issues discovered by Google, Apple appreciated their help by sharing a message on the internet:
“We’d like to thank Google for sending us a report in which they explore both the ability to detect when web content is treated differently by tracking prevention and the bad things that are possible with such detection. Their responsible disclosure practice allowed us to design and test the changes detailed above.”
Apple Safari’s tracking system faults and others
The flaws discovered by Google’s team shows how the third-party companies could have found out the user’s sensitive and private browsing information. The issue also enabled a site to implement a cross-site attack and add another domain to the ITP list. Using existing vulnerabilities in iOS, the Google security team exposed that a series of web exploits similarly aimed at Uyghur Muslims in China last August.
However, Google’s Chrome browser has very often been scrutinized for its insufficiency of privacy-protecting mechanisms. In two years, the company is going to follow Safari and Firefox in blocking third-party cookies, as announced last week.