[thenewnewguy]

The point is that the app can just record the old IDFA, and when the IDFA changes whoever is doing the comparison between two apps knows that the old and new IDFA are one and the same.

[tgsovlerkhgsel]

A likely-good-enough fix would be for Apple to first make extremely clear that this is not allowed, then catch one ad framework/library provider violating the rule and ban every single app/publisher using it to ensure the rule is actually taken seriously.

[scarface74]

How do you “catch” them? The ID is sent from the app and not in plaintext.

[tgsovlerkhgsel]

Through the usual software analysis methods (reverse engineering, static and dynamic analysis, ...)

[afiori]

I imagine with the usual review process

[scarface74]

The review process can’t tell the contents of the data being sent back.

[marc3842h]

What I think is that if the ID would be reused this would be kinda eliminated? I don't see a reason to not make them reusable.