21–30 of 99 posts
cameradust, browser fingerprinting, graphic/sound card canvas, memory canvas mouse usage, keyboard usage, cpu serial number, MAC, router MAC, system logs, telemetry
Sounds too complicated, and half of that is not even accessible from the browser. He used just the browser.
Earlier quoted context omitted.
Sounds too complicated, and half of that is not even accessible from the browser. He used just the browser.
javascript has a lot of power, and it acesses more than the browser, and none of this is remotely too complicated, it happens on a daily basis. your browser does a lot more than you think. FB most definately does not stay in your browser when it gets its hooks on you. BTW modal dialog buttons do more than the label says, the old meme "what button do i push to hack someone" can be written to "what button do i click to…
1) User requests account deletion. Facebook does not delete it, keeps track of his phone number via shadow profiles. (Mike is still mike@gmail.com, 800-555-1234)
2) User creates a new Proton Mail address. (Fakey@protonmail.com)
3) One of his friends adds that email address to his contact. (Mike, mike@gmail.com, fakey@protonmail.com, 800-555-1234). This user is on Instagram, Facebook, or has some mobile app that uses their analytics.
4) Facebook makes the association after scraping his friends contact list.
Essentially, his friends betrayed him, likely unintentionally.
cameradust, browser fingerprinting, graphic/sound card canvas, memory canvas mouse usage, keyboard usage, cpu serial number, MAC, router MAC, system logs, telemetry
cameradust? that's clever if it means what i think it means, aka looking at artifacts in a photo caused by "gunk" on your lens.
OP was probably not a very technical user, else he/she would've understood that 1. They should've deleted _all_ relevant cookies (in the browser, as well as in the browsers cookie database) 2. There are many 3rd party companies that sell data packs that derive residential IPs from VPN IPs (we use some at work). A trusted/good VPN is a must 3. They probably came via the same User Agent (didn't mention changing browser…
Earlier quoted context omitted.
cameradust? that's clever if it means what i think it means, aka looking at artifacts in a photo caused by "gunk" on your lens.
yes it does, there is also acoustic analysis of keyboard noise, quite a lot and this all happens at the time of account creation and early account use until the FB AI thinks it knows who you are, there is no need for constant listening or watching,
I think there's a much simpler answer than some sort of "deep browser fingerprinting" or other scary voodoo. 1) User requests account deletion. Facebook does not delete it, keeps track of his phone number via shadow profiles. (Mike is still mike@gmail.com, 800-555-1234) 2) User creates a new Proton Mail address. (Fakey@protonmail.com) 3) One of his friends adds that email address to his contact. (Mike, mike@gmail.com…
No, people are just far worse at separating their “new” identities from their old ones than they think.
You don’t even need a shadow profile tracking previous info to do this. Just infer PYMK via a few friends he adds on the new account.
OP was probably not a very technical user, else he/she would've understood that 1. They should've deleted _all_ relevant cookies (in the browser, as well as in the browsers cookie database) 2. There are many 3rd party companies that sell data packs that derive residential IPs from VPN IPs (we use some at work). A trusted/good VPN is a must 3. They probably came via the same User Agent (didn't mention changing browser…
link to some of those companies?
Earlier quoted context omitted.
cameradust? that's clever if it means what i think it means, aka looking at artifacts in a photo caused by "gunk" on your lens.
yes it does, there is also acoustic analysis of keyboard noise, quite a lot and this all happens at the time of account creation and early account use until the FB AI thinks it knows who you are, there is no need for constant listening or watching,
I think there's a much simpler answer than some sort of "deep browser fingerprinting" or other scary voodoo. 1) User requests account deletion. Facebook does not delete it, keeps track of his phone number via shadow profiles. (Mike is still mike@gmail.com, 800-555-1234) 2) User creates a new Proton Mail address. (Fakey@protonmail.com) 3) One of his friends adds that email address to his contact. (Mike, mike@gmail.com…