YouTube link for folks who are having buffering issues https://www.youtube.com/watch?v=vYam1GqtoLY
I get 'video removed by user' with that url.
They seem to have reuploaded the video in YouTube channel.
How Facebook tracks you on Android [video]
191–200 of 213 posts
Re: How Facebook tracks you on Android [video]
#192Earlier quoted context omitted.
> The massive market share is because of cheap phones. The cheap phones are because Google allows 3rd-party OEMs to install Android on their own devices, even though that carries an extra risk of having an outdated phone, or a 3rd-party back door, or just a crappy experience that degrades the overall Android brand. It's the exact same thing we're talking about -- Apple doesn't do that because they think giving random…
This isn't an iOS vs Android contest. It doesn't matter who has the better implementation. In a thread about how Facebook invades users’ privacy because of lax security controls on Android, it does matter that one method of allowing third party keyboards is “secure” and the other isn’t. Innovation != profit. Otherwise, Open Source communities would be a lot richer. This is like saying, "well if newspapers have such g…
> There are plenty of apps that do that with the iPhone.
...no. iOS doesn't have a user-accessible file browser. On Android, I can use my browser to access system files from any other application. Apps in iOS are sandboxed from the file system. I'm confused -- isn't that one of the things you like about iOS?
Maybe that's changed since the last time I used an iPhone? Did Apple break and add a system-wide file access permission recently? I don't see any iOS apps advertising that feature, but maybe I'm missing something.
The point I'm getting at is not whether or not iOS is more secure than Android. It's that the open app approach, while flawed for many reasons, allows developers to pursue innovative applications like weird keyboards that let you swipe instead of tap, and background apps that let you turn parts of your phone on and off when you walk into your house, and custom stylus-oriented devices that let you scrawl notes on your home screen while your phone's locked, and firewalls that let you monitor system-wide network requests and block ads, and homescreen widgets, and, yes, even network-level privileges that allowed 3rd-party OEMs and developers to add tethering regardless of what service providers wanted.
Some of these ended up being bad ideas, and some of them ended up being good ideas. And since then, some of the good ideas have gotten copied to iOS, with tweaks.
This is good for everyone. It's especially good for Apple users.
The point I'm getting at is you can't only focus on one part of this equation. Android is less secure than Apple because it's open. But it also, objectively, has a wider array of low and high-end devices and applications than iOS does. The same is true of Windows. Windows is insecure. But they also have Surface Books, which are cool. It's a trade-off.
When you talk about going wholesale down the "we control everything" approach, you are treating a multidimensional issue like it has exactly one right answer. It is in everyone's best interest to have multiple different systems trying out multiple different approaches.
> One of the posts in this thread was talking about “entrepreneurship”
Okay. But I'm not.
Re: How Facebook tracks you on Android [video]
#193I use Netguard ( https://github.com/M66B/NetGuard ) and block out access to Facebook's Graph API by every app on my phone. Works very well.
I did exactly the same thing using NetGuard. It opens your eyes to how much tracking happens with almost every app.
I also block Wi-Fi and mobile data access wholesale for apps like virtual keyboards and most pre-loaded crapware that can't be uninstalled.
Re: How Facebook tracks you on Android [video]
#194Earlier quoted context omitted.
> The Android platform API should simply never allow apps to obtain global system identifiers When the revenue stream of the creator of Android fundamentally depends on being able to tie devices to identity and behaviour, it's highly unlikely this is going to happen. They can't also keep it only for themselves and block for others or they'll get unfair trade practices action on their backs. Thr fact that Apple which…
> Thr fact that Apple which could do this without significant adverse monetary impact but has chosen not to They restrict access to most of the things listed above, giving randomised fakes where necessary. The advertising ID they do let apps access is unique to a publisher so they can't be tied together with behaviour from apps by other publishers, and it's trivially disabled/resettable by the end user (Settings > Pr…
> The advertising ID they do let apps access is unique to a publisher so they can't be tied together with behaviour from apps by other publishers, and it's trivially disabled/resettable by the end user (Settings > Privacy > Advertising > Limit Ad Tracking / Reset Advertising Identifier…).
They still let apps give you a unique identifier through shared containers, those will only be deleted if you delete all apps that can access it. There is also some other container (I forgot the name) which will never be deleted unless you get a new device and don't restore any backups. You can see this kind of behaviour when you delete Instagram and they automatically fill out your username the next time you install it.
With Facebook owning WhatsApp, they are already able to give each iOS device a unique identifier. What is Apple going to do about it? Remove WhatsApp from the App Store?
Re: How Facebook tracks you on Android [video]
#195Earlier quoted context omitted.
> The Android platform API should simply never allow apps to obtain global system identifiers (serial numbers, "advertising IDs", MACs, Wifi network info, EMEIs etc) in the first place. Of course. On the other hand, Google's global attitude is that user tracking is fine, their core business is based on that. So it would be hypocritical on their part if they decided to block user tracking on their devices.
They have increasingly revised or clamped down on the various unique IDs and are pushing everyone to the (user-resetable) advertising ID. Things like the MAC have already been hardcoded to a single fixed value for a couple of years now. You're just spreading unsupported fud. Actions speak louder than words and Google's actions for Android apps and APIs do not agree with your comments.
It's very kind of Google to, say, make the recent change re. Build.SERIAL/Build.getSerial() so that it requires a permission now. That's a step in the right direction, but we're still very far from being untrackable.
Re: How Facebook tracks you on Android [video]
#196Wrangling 3rd party application access to platform providers' suite (ios, android, browser extensions). Cookies seem to be the majority of the aggregate identity/behavior data, which you can use various rules in the protocol to limit tracking to some extent. I've found that opting out on a regular basis of the large adverts for a little extra peace of mind. uBlock/uMatrix Origin, ghostery, duck.com, dns encryption, v…
one thing that irks me is ppl blindly suggesting duckduckgo over google DDG is fucking horrible It doesn't work. I'm almost always going back to Google. There should be a service that searches Google for you behind 7 proxies.
The only way to surf/search without Google identifying you is to use a cloudbrowser. Because you are using a VM and a disposable browser, any search engine is getting incorrect info about you and your searches. It makes Google a private search engine. www.tracefree.com
Re: How Facebook tracks you on Android [video]
#197Earlier quoted context omitted.
> Thr fact that Apple which could do this without significant adverse monetary impact but has chosen not to They restrict access to most of the things listed above, giving randomised fakes where necessary. The advertising ID they do let apps access is unique to a publisher so they can't be tied together with behaviour from apps by other publishers, and it's trivially disabled/resettable by the end user (Settings > Pr…
> The advertising ID they do let apps access is unique to a publisher so they can't be tied together with behaviour from apps by other publishers, and it's trivially disabled/resettable by the end user (Settings > Privacy > Advertising > Limit Ad Tracking / Reset Advertising Identifier…). They still let apps give you a unique identifier through shared containers, those will only be deleted if you delete all apps that…
Shared containers are also restricted by publisher – you can't share data with another publisher using them.
I believe the other container you're talking about is the keychain. You can store small amounts of data in there (typically secure auth info) and it will persist even after app deletion. This is hardware encrypted by the Secure Enclave and can't be shared between publishers.
Apple have shown that they are willing to remove big social media apps from the App Store just a few weeks ago, with Tumblr.
Also, collecting information for use in WhatsApp and using it for a different purpose in Facebook is a DPA and GDPR violation:
https://www.theguardian.com/technology/2018/mar/14/whatsapp-...
Re: How Facebook tracks you on Android [video]
#198Earlier quoted context omitted.
This isn't an iOS vs Android contest. It doesn't matter who has the better implementation. In a thread about how Facebook invades users’ privacy because of lax security controls on Android, it does matter that one method of allowing third party keyboards is “secure” and the other isn’t. Innovation != profit. Otherwise, Open Source communities would be a lot richer. This is like saying, "well if newspapers have such g…
> There are plenty of apps that do that with the iPhone. ...no. iOS doesn't have a user-accessible file browser. On Android, I can use my browser to access system files from any other application. Apps in iOS are sandboxed from the file system. I'm confused -- isn't that one of the things you like about iOS? Maybe that's changed since the last time I used an iPhone? Did Apple break and add a system-wide file access p…
As far as file access, no app should ever need access to the entire file system - just the users’ files. Even then, a photo/video app should only need access to the photo library a music app should only need access to your music library etc.
As far as generic files again the user chooses which files the app has access to outside of the sandbox via a standard file picker.
Besides the built in iCloud, if you install Dropbox, OneDrive, Google Drive, etc. you can choose any of those as destinations when you want to save or load a file from the standard file picker. They all just “storage providers”.
But if you want a local file storage solution that is accessible by all apps, you can install a storage provider for that too.
https://www.howtogeek.com/204010/how-to-get-an-android-style...
You can do SFTP etc.
Re: How Facebook tracks you on Android [video]
#199Wrangling 3rd party application access to platform providers' suite (ios, android, browser extensions). Cookies seem to be the majority of the aggregate identity/behavior data, which you can use various rules in the protocol to limit tracking to some extent. I've found that opting out on a regular basis of the large adverts for a little extra peace of mind. uBlock/uMatrix Origin, ghostery, duck.com, dns encryption, v…
one thing that irks me is ppl blindly suggesting duckduckgo over google DDG is fucking horrible It doesn't work. I'm almost always going back to Google. There should be a service that searches Google for you behind 7 proxies.
I've been using DuckDuckGo exclusively for almost 2 years now. Never had a problem. There were a couple times early on when I was like "these results are bad, lemme check Google", only to find out Google's results were pretty much the same. DDG just buys results from other providers, so their results are pretty much always going to be acceptable.
Edit: Just wanted to say I'm not try to discount your experience, I just don't want to dissuade future people from trying out other search engines, when I think switching search engines is one of the biggest and easiest privacy wins a lot of people can do.
Re: How Facebook tracks you on Android [video]
#200Earlier quoted context omitted.
TL;DR seems to be that lots of apps include the Facebook SDK and when you initialise the SDK it always sends your device ID back to Facebook. Most negative news about Facebook is nonsense but this does seem to be pretty shady on Facebook's part.
Just speculating, but they might just need this information to combat bots actually. Think about it, they already know who you are because you are logged in with your account. They don’t need more info than that to run targeted ads.
The talk is about tracking people that do not have a fb account with apps using the facebook SDK.