通过Safari的智能跟踪预防信息泄露
Information Leaks via Safari's Intelligent Tracking Prevention
摘要：
智能跟踪预防（ITP）是苹果Safari浏览器实现的一种隐私机制，于2017年10月发布。ITP旨在通过限制Cookie和其他网站数据的功能来减少对网络用户的跨站点跟踪。作为常规安全审查的一部分，Google的信息安全工程团队在Safari的ITP设计中发现了多个安全和隐私问题。这些问题带来了许多意想不到的后果，包括泄露用户的网页浏览习惯，允许持续的跨站点跟踪，以及实现跨站点信息泄露（包括跨站点搜索）。本报告是我们向Apple提交的原始漏洞（WebKit bug #201319）的适度扩展版本，提供了额外的上下文，并进行了编辑。本文讨论的一些问题已在2019年12月发布的Safari 13.0.4和iOS 13.3中得到解决。
英文摘要：
Intelligent Tracking Prevention (ITP) is a privacy mechanism implemented by Apple's Safari browser, released in October 2017. ITP aims to reduce the cross-site tracking of web users by limiting the capabilities of cookies and other website data. As part of a routine security review, the Information Security Engineering team at Google has identified multiple security and privacy issues in Safari's ITP design. These issues have a number of unexpected consequences, including the disclosure of the user's web browsing habits, allowing persistent cross-site tracking, and enabling cross-site information leaks (including cross-site search). This report is a modestly expanded version of our original vulnerability submission to Apple (WebKit bug #201319), providing additional context and edited for clarity. A number of the issues discussed here have been addressed in Safari 13.0.4 and iOS 13.3, released in December 2019.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
