Disabling "advertising ID" on iOS makes it extremely difficult to reliably fingerprint phones. Apple doesn't allow SDKs which attempt to bypass this, so the app would have to have a first party auth of some type.
>Disabling "advertising ID" on iOS makes it extremely difficult to reliably fingerprint phones.
You got this flipped. The whole point of "fingerprinting" is to build a stable identifier that works even if a explicit identifier (IMEI or advertising ID) isn't available. And yes, there are shady SDKs that do this without facing repercussions.
Testing that on ten phones is hardly evidence. I am skeptical that the approach described would be very useful for reliable fingerprinting.
IIRC Apple also specifically prohibits exporting device signals like boot time and available disk space, so that SDK would be in violation of their rules if the description is accurate.
That may have been true initially but meta has enough information to heuristically observe unidentified users and compare their behaviors with known consumers. It only takes a few actions to uniquely identify a consumer with a high degree of confidence.
Pretty sure Meta doesn't do that on iOS devices because that'll get you banned from the App Store. They just figured out ways to not need individual fingerprinting.