Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Created a fake account and Facebook still figured out who I am. How?

reddit.com

Post reply on HN
Print view View original

11–20 of 99 posts

Re: Created a fake account and Facebook still figured out who I am. How?

#11

Post by decebalus1 »

rayvy wrote: post #7

OP was probably not a very technical user, else he/she would've understood that 1. They should've deleted _all_ relevant cookies (in the browser, as well as in the browsers cookie database) 2. There are many 3rd party companies that sell data packs that derive residential IPs from VPN IPs (we use some at work). A trusted/good VPN is a must 3. They probably came via the same User Agent (didn't mention changing browser…

> 2. There are many 3rd party companies that sell data packs that derive residential IPs from VPN IPs (we use some at work). A trusted/good VPN is a must

Are you implying that ProtonVPN is not trusted/good? I'm seriously interested in what you know about this particular VPN provider as this is the one OP mentions he's was using.

Re: Created a fake account and Facebook still figured out who I am. How?

#12

Post by prewett »

We all send out packets with our MAC address, which is supposed to be unique, so it seems like it would be easy to correlate the two profiles, since the MAC address is the same.

Makes me think there’s not going to be an effective technological means of resisting tracking.

Re: Created a fake account and Facebook still figured out who I am. How?

#13

Post by detaro »

prewett wrote: post #12

We all send out packets with our MAC address, which is supposed to be unique, so it seems like it would be easy to correlate the two profiles, since the MAC address is the same. Makes me think there’s not going to be an effective technological means of resisting tracking.

The MAC address doesn't leave the local network, an internet service can't see it. (Sometimes IPv6 addresses are derived from it, but any modern OS should use privacy extensions, which create randomized addresses)

Re: Created a fake account and Facebook still figured out who I am. How?

#15

Post by whizzkid »

There are tens of attributes that can be used to identify you and generate a unique id of it. Cookies are just the 101.

Canvas fingerprinting, extensions, screen resolution and etc.

I read it somewhere that FB is pre-creating profiles for those who haven't even created a FB account yet (Face recognition and etc).

Avoid using it.

Re: Created a fake account and Facebook still figured out who I am. How?

#16

Post by meetuu »

megous wrote: post #10
meetuu wrote: post #5

cameradust, browser fingerprinting, graphic/sound card canvas, memory canvas mouse usage, keyboard usage, cpu serial number, MAC, router MAC, system logs, telemetry

Sounds too complicated, and half of that is not even accessible from the browser. He used just the browser.

javascript has a lot of power, and it acesses more than the browser, and none of this is remotely too complicated, it happens on a daily basis. your browser does a lot more than you think. FB most definately does not stay in your browser when it gets its hooks on you. BTW modal dialog buttons do more than the label says, the old meme "what button do i push to hack someone" can be written to "what button do i click to let facebook hack me"

It soon becomes apparent that not a lot of people know as much about thier hardware, and or software as they think they do. Dont forget zuckerburgs roots, hes a black hat 101%

FWIW all you dvoters need to bone up on your skills if you think this, and more is too complex.

Re: Created a fake account and Facebook still figured out who I am. How?

#18

Post by m3kw9 »

prewett wrote: post #12

We all send out packets with our MAC address, which is supposed to be unique, so it seems like it would be easy to correlate the two profiles, since the MAC address is the same. Makes me think there’s not going to be an effective technological means of resisting tracking.

The your local router strips the Ethernet headers (with the MAC address) before forwarding it out to another router

Re: Created a fake account and Facebook still figured out who I am. How?

#19

Post by albeebe1 »

meetuu wrote: post #5

cameradust, browser fingerprinting, graphic/sound card canvas, memory canvas mouse usage, keyboard usage, cpu serial number, MAC, router MAC, system logs, telemetry

cameradust? that's clever if it means what i think it means, aka looking at artifacts in a photo caused by "gunk" on your lens.

Re: Created a fake account and Facebook still figured out who I am. How?

#20

Post by strictnein »

meetuu wrote: post #16
megous wrote: post #10

Earlier quoted context omitted.

Sounds too complicated, and half of that is not even accessible from the browser. He used just the browser.

javascript has a lot of power, and it acesses more than the browser, and none of this is remotely too complicated, it happens on a daily basis. your browser does a lot more than you think. FB most definately does not stay in your browser when it gets its hooks on you. BTW modal dialog buttons do more than the label says, the old meme "what button do i push to hack someone" can be written to "what button do i click to…

> javascript has a lot of power, and it acesses more than the browser, and none of this is remotely too complicated

While you can finger print a browser relatively well with javascript, it does not have access to a number of the things you list, like MAC, router MAC, CPU serial number, etc.

Post reply on HN