Proposal: Treat FLoC as a security concernGoogle is rolling out Federated Learning of Cohorts (FLoC) for the Chrome browser.
TL;DR: FLoC places people in groups based on their browsing habits to target advertising.
Why is this bad? As the Electronic Frontier Foundation explains in their post “Google’s FLoC is a terrible idea“, placing people in groups based on their browsing habits is likely to facilitate employment, housing and other types of discrimination, as well as predatory targeting of unsophisticated consumers.
This is in addition to the privacy concerns of tracking people and sharing their data, seemingly without informed consent – and making it more difficult for legislators and regulators to protect people.
So What Now?WordPress powers approximately 41% of the web – and this community can help combat racism, sexism, anti-LGBTQ+ discrimination and discrimination against those with mental illness with four lines of code:
Kod:
function disable_floc($headers) {
$headers['Permissions-Policy'] = 'interest-cohort=()';
return $headers;
}
add_filter('wp_headers', 'disable_floc');
What About Admins Who Want FLoC?
Those websites who want to opt into FLoC are likely to have the technical know-how to simply override this proposed filter in Core.
When balancing the stakeholder interests, the needs of website administrators who are not even aware that this is something that they need to mitigate – and the interests of the users and visitors to those sites, is simply more compelling.
Furthermore, for WordPress versions that support privacy settings, we can easily add an on-off toggle to enable websites to opt in. This would only require a few more lines of code and only a couple of new strings.
Why Treat It As A Security Concern? Why Not Just Wait For The Next Major Release?
Well, keep your eyes peeled, because there is a ticket for future releases on its way!
While it is indeed unusual to treat a new “feature” this way, there is precedent in that something that was not strictly a security vulnerability in comments was back-ported to previous versions for the good of the community as a whole.
Currently, 5.8. is only scheduled for July 2021. FLoC will likely be rolling out this month.
Furthermore, a significant number of WordPress sites only update to minor versions. By back-porting, we can protect more sites and more visitors to those sites – and amplify the impact.