Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Android wallpaper images can threaten privacy

fingerprintjs.com

Post reply on HN
Print view View original

31–40 of 81 posts

Re: Android wallpaper images can threaten privacy

#31

Post by amatecha »

jeroenhd wrote: post #7

Although this is an interesting, novel method, there are so many fingerprinting capable APIs in native code that I don't think this matters much. Many apps I use daily require internal storage permissions and a bunch of them drop random dotfiles with magical IDs in there. Xiaomi even dumps a world readable unique device ID on the emulated SD card. Not all apps require external storage permissions, but even then there…

"trying their absolute hardest to reduce the fingerprinting surface"... for anyone else :)

Re: Android wallpaper images can threaten privacy

#32

Post by zaik »

> This color extraction algorithm is basically a map from the set of all possible images to the RGB color space. The set is infinite and the RGB color space is limited by 2^24 combinations. Theoretically, this means every RGB combination is possible.

I know this is missing the point of the article, but this is not how the pigeonhole principle works.

Re: Android wallpaper images can threaten privacy

#33

Post by basicplus2 »

no_time wrote: post #12

Interesting article but its rich as fuck coming from a company whose sole product is weaponizing the ever increasing scope of browsers against users

I take the article as an advert to say 'use us to fingerprint people, we are always thinking of different ways to reliably finger people'

Re: Android wallpaper images can threaten privacy

#34

Post by ignoramous »

amatecha wrote: post #31
jeroenhd wrote: post #7

Although this is an interesting, novel method, there are so many fingerprinting capable APIs in native code that I don't think this matters much. Many apps I use daily require internal storage permissions and a bunch of them drop random dotfiles with magical IDs in there. Xiaomi even dumps a world readable unique device ID on the emulated SD card. Not all apps require external storage permissions, but even then there…

"trying their absolute hardest to reduce the fingerprinting surface"... for anyone else :)

Yes, they indeed are. Though, it could be argued that Google doesn't want anyone else fingerprinting 3B+ Android users other than themselves. Most of their apps ("gapps") are pre-installed with backdoor privileges that can bypass sandbox restrictions in-place for every other (non-OEM) app.

Re: Android wallpaper images can threaten privacy

#35

Post by bogwog »

no_time wrote: post #12

Interesting article but its rich as fuck coming from a company whose sole product is weaponizing the ever increasing scope of browsers against users

Yeah I don't know how to interpret this article. Is it a warning to users about a new threat to privacy, or is it an announcement to customers about improved tracking capabilities in Android 12/a potential product update?

Even if it's just some inbound marketing blog spam bullshit, why would a company whose business it is to violate and exploit privacy want to post an article that will attract people who are concerned about privacy?

Re: Android wallpaper images can threaten privacy

#36

Post by bayindirh »

SeriousM wrote: post #17
jeroenhd wrote: post #7

Although this is an interesting, novel method, there are so many fingerprinting capable APIs in native code that I don't think this matters much. Many apps I use daily require internal storage permissions and a bunch of them drop random dotfiles with magical IDs in there. Xiaomi even dumps a world readable unique device ID on the emulated SD card. Not all apps require external storage permissions, but even then there…

Could fuchsia be the solution to this? It's a fresh start and no company is depending on any of its api. But I guess fuchsia is a flaw for its own because of google...

I would assume the opposite. Why a company which makes money from tracking users for many reasons develops an OS which prevents tracking?

My guess is that it'd be an OS which would perform tasks Google needs to stay as Google better than Android, and Google may sell these capabilities to devs to further enhance their bottom line.

Re: Android wallpaper images can threaten privacy

#37

Post by magicalist »

ignoramous wrote: post #34
amatecha wrote: post #31

Earlier quoted context omitted.

"trying their absolute hardest to reduce the fingerprinting surface"... for anyone else :)

Yes, they indeed are. Though, it could be argued that Google doesn't want anyone else fingerprinting 3B+ Android users other than themselves. Most of their apps ("gapps") are pre-installed with backdoor privileges that can bypass sandbox restrictions in-place for every other (non-OEM) app.

> Most of their apps ("gapps") are pre-installed with backdoor privileges that can bypass sandbox restrictions in-place for every other (non-OEM) app

Hadn't heard about this. Like what?

Re: Android wallpaper images can threaten privacy

#38

Post by saurik »

jeroenhd wrote: post #7

Although this is an interesting, novel method, there are so many fingerprinting capable APIs in native code that I don't think this matters much. Many apps I use daily require internal storage permissions and a bunch of them drop random dotfiles with magical IDs in there. Xiaomi even dumps a world readable unique device ID on the emulated SD card. Not all apps require external storage permissions, but even then there…

> Unless app stores kick out apps that fingerprint devices, I don't think we'll see any non-fingerprinted devices any time soon.

Talk about throwing out the baby with the bath water on making Apple and Google the equivalent of government with the ability to define the rules on all software that anyone can exist without even considering using actual government :(.

Re: Android wallpaper images can threaten privacy

#40

Post by ignoramous »

magicalist wrote: post #37
ignoramous wrote: post #34

Earlier quoted context omitted.

Yes, they indeed are. Though, it could be argued that Google doesn't want anyone else fingerprinting 3B+ Android users other than themselves. Most of their apps ("gapps") are pre-installed with backdoor privileges that can bypass sandbox restrictions in-place for every other (non-OEM) app.

> Most of their apps ("gapps") are pre-installed with backdoor privileges that can bypass sandbox restrictions in-place for every other (non-OEM) app Hadn't heard about this. Like what?

See: https://grapheneos.org/usage#sandboxed-play-services
Post reply on HN