Live data from Hacker News

Android wallpaper images can threaten privacy

fingerprintjs.com

11–20 of 81 posts

Re: Android wallpaper images can threaten privacy

#16
how am I being tracked from this? It takes pages to get to the point where supposedly the wallpaper color reduction could be unique enough ....but when is that going to be used to track me? Or rather, who is going to depend on that to track me across the device? Stretch no?

Re: Android wallpaper images can threaten privacy

#17
post #7

Although this is an interesting, novel method, there are so many fingerprinting capable APIs in native code that I don't think this matters much. Many apps I use daily require internal storage permissions and a bunch of them drop random dotfiles with magical IDs in there. Xiaomi even dumps a world readable unique device ID on the emulated SD card. Not all apps require external storage permissions, but even then there…

Could fuchsia be the solution to this? It's a fresh start and no company is depending on any of its api. But I guess fuchsia is a flaw for its own because of google...

Re: Android wallpaper images can threaten privacy

#18

Earlier quoted context omitted.

They don't - without special permissions on newer Android versions (10+). There is an ANDROID_ID but it's scoped to your application on Android 8.0+, reinstalling the same app signed with same key will give you the same key but it returns a different value in other apps. This way you can't use for cross-app tracking. https://developer.android.com/training/articles/user-data-id... https://developer.android.com/referen…

How does Google share logins between different apps then? Is there some shared keybag/storage location that only works for the developer's own apps (and is it scoped to the actual developer account, not one that different developers can collude to use together)?

Apps that have the same signing keys can share code and data: https://developer.android.com/studio/publish/app-signing#con...

Re: Android wallpaper images can threaten privacy

#19

how am I being tracked from this? It takes pages to get to the point where supposedly the wallpaper color reduction could be unique enough ....but when is that going to be used to track me? Or rather, who is going to depend on that to track me across the device? Stretch no?

It generates a unique fingerprint for your phone that can be used across apps without permissions. So if you have multiple apps using the same ad network SDK, each of them will get the same unique fingerprint for you and can tie your activity together. If you're logged into one of the apps, then your activity across all the apps can be tied to your login even when you change your wallpaper.
Post reply on HN