1653552 - Enhanced Tracking Protection appears to interfere with Scroll

Status: RESOLVED INVALID

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Matthew Gaudet (he/him) [:mgaudet]]

Attachment: Screen Shot 2020-07-17 at 6.22.51 AM.png

STR:

1. Sign up for an account at Scroll.com
2. Visit a partner site (The Verge for example)

Expected results: Normal scroll toolbar at the bottom

Actual Results: Warning (attached)

Problem is resolved if ETP is disabled.

Comment 1

[Steven Englehardt [:englehardt]]

Thanks for the report! This might be caused by dFPI but I don't have a Scroll account to test.

Are you using Nightly 80? If so, I'll see if I can get an account to confirm.

Comment 2

[Matthew Gaudet (he/him) [:mgaudet]]

I am;

Also, to clarify the STR: You'll want to go to scroll.com, then click the partner link to theverge.com -- doing that seems to bring up the warning that scroll isn't working. Otherwise, it seems to just silently fail.

Comment 3

[Matthew Gaudet (he/him) [:mgaudet]]

Scroll has a free trial BTW.

Comment 4

[Steven Englehardt [:englehardt]]

Thanks. I can confirm that this is caused by dFPI (cookieBehavior=5).

I only see the banner when I visit from the Scroll website, which means they probably detect that that user is a scroll user based on some query parameters and show the message if they're unable to authenticate the user. I haven't looked deeply at the code, but this message appears both when scroll cookies are partitioned and when they're blocked.

If I visit the page directly I don't see the message. Same if I refresh. In these cases I guess Scroll doesn't have any information to know I'm a Scroll user.

This can at least partially be fixed by Scroll using the same detection mechanism to know when to call the Storage Access API. Peter or Tanvi, would mind to reach out to Scroll?

Comment 5

[Peter Saint-Andre [:stpeter]]

Outreach initiated.

Comment 6

[Emma Zühlcke [:emz]]

Scroll is no longer around: https://en.wikipedia.org/wiki/Scroll_(web_service)