Live data from Hacker News

Everyone knows your location: tracking myself down through in-app ads

timsh.org

151–160 of 628 posts

Re: Everyone knows your location: tracking myself down through in-app ads

#151
post #133

I'm a very happy paying customer of NextDNS ( https://nextdns.io ) which blocks known adware and tracking hosts across all mobile and desktop platforms.

Which does absolutely nothing if your device or the app in question is permitted or otherwise not prevented from making DNS-over-HTTPS (or, less commonly because of its discrete port, DNS-over-TLS) queries.

Re: Everyone knows your location: tracking myself down through in-app ads

#152
post #21

>If it was LTE, I bet the lat/lon would be much more precise. False. Apps don't have access to cellid information unless they also have location permissions, in which case they can just request your location directly. >the free apps you install and use collect your precise location with timestamp [...] This is alarmist and contradictory given that the author admits a few paragraphs up that the "location shared was no…

Eh. Zip code level location + timestamp is still pretty invasive, even if, pedantically, that’s not very precise. We should compare if there a differences in the data sent in countries with better data privacy laws.

"Precise" has a specific meaning for iOS Location Services and this ain't it. Presumably it's just doing IP geolocation which could be the same post code, or it could be the wrong city entirely. I'd expect it to be much worse on LTE than WiFi.

Re: Everyone knows your location: tracking myself down through in-app ads

#153
post #99

> There's no "personal information" here, but honestly this amount of data shared with an arbitrary list of 3rd parties is scary. Why do they need to know my screen brightness, memory amount, current volume and if I'm wearing headphones? Screen brightness, boot time, memory, and network operator could probably fingerprint any device all by itself.

A lot of people have "autobrightness" on. I'd think brightness doesn't help much here

Automatic brightness probably helps honestly. It could help confirm whether someone is in fact in an area that has high levels of lighting around them (e.g., in a store, at a beach on a sunny day, etc.)

Everything little piece of data that is gathered and used can help even if it isn't immediately apparent.

Now I could be wrong on this, but I feel like advertisers don't need to know something is true about a user, they just need to be confident something is true about a user and that's where data points like screen brightness can be of help to them.

Re: Everyone knows your location: tracking myself down through in-app ads

#154
Parts I found relevant:

  - It was a clean state of a somewhat old phone (iPhone 11, factory defaults + new apple id)
  - A single (old) app was installed (Stack by KetchApp, 10-12 years old)
  - Was sending out an update a second pretty much instantly (5 kB - ~300 KB every second)
  - Within a minute: IP, Lat / Lon, country, phone model, carrier / network operator, vendor, OS version, connection type (wifi), headphone status (?), volume setting (?), screen brightness setting (?), battery status (?), CPU count, system RAM, free RAM allocation, free hard drive capacity, system boot time (?)
Might as well just screen grab the Task Manager equivalent and hand it to them. Have better, quicker data about my own current RAM allocation and free hard space than I do. It hands them when the system booted for an ad? The headphone, volume, brightness, and battery was just "what" kind of headshake about invasiveness. Somebody'd hand wave they need it (we want it, we want it). They obviously don't.

Edit: It's almost Remote Desktop, on an iPhone. Realtime (~1 Hz) RAM / ROM allocation. Not sure how many Apple user even know how to check their realtime RAM / ROM allocation. The free hard drive space especially is just asking for botnet downloads.

Edit: Right, and ... disabling tracking doesn't mean anything because numerous updates blatantly ignore the setting ("uc": "1", // User consent for tracking = True;) and it's just a flag while they still send your vendor specific customer identifier anyways.

Really interesting article, and great investigation, just disturbing how much on an effectively clean phone.

Re: Everyone knows your location: tracking myself down through in-app ads

#155
post #54

> was shocked by the amount and types of data sent with the bids to ad exchanges. Can this data fall into the hands of "evil" state actors, and why is Congress OK with that and not with tiktok?

Blaming China is easy and has bipartisan appeal while actual data privacy regulations are hard and do not.

Re: Everyone knows your location: tracking myself down through in-app ads

#156
One big privacy issue is that there is no sane way to protect your contact details from being sold, regardless of what you do.

As soon as your cousin clicks "Yes, I would like to share the entire contents of my contacts with you" when they launch TikTok your name, phone number, email etc are all in the crowd.

And I buy this stuff. Every time I need customer service and I'm getting stonewalled I just go onto a marketplace, find an exec and buy their details for pennies and call them up on their cellphone. (this is usually successful, but can backfire badly -- CashApp terminated my account for this shenanigans)

Re: Everyone knows your location: tracking myself down through in-app ads

#157
post #6

There are quite a few interesting tracking flows out there. My rent is paid through a company called Bilt. I discovered that when I shop at Walgreens now, Bilt sends me an email containing the full receipt of what I bought like so: > Hey [inahga], > > You shopped at Walgreens on 12/1/24 and earned Bilt Points with your > Neighborhood Pharmacy benefit. > > Items eligible for rewards > TOSTITOS HINT OF LIME RSTC 11OZ >…

[deleted]

Re: Everyone knows your location: tracking myself down through in-app ads

#158
post #133

I'm a very happy paying customer of NextDNS ( https://nextdns.io ) which blocks known adware and tracking hosts across all mobile and desktop platforms.

Facebook hard-code IP addresses when their domains are blocked. I found this out while using NextDNS alongside that logging functionality that iPhones have. It’s insane the lengths that they go to.

Re: Everyone knows your location: tracking myself down through in-app ads

#159
post #154

Parts I found relevant: - It was a clean state of a somewhat old phone (iPhone 11, factory defaults + new apple id) - A single (old) app was installed (Stack by KetchApp, 10-12 years old) - Was sending out an update a second pretty much instantly (5 kB - ~300 KB every second) - Within a minute: IP, Lat / Lon, country, phone model, carrier / network operator, vendor, OS version, connection type (wifi), headphone statu…

> The headphone, volume, brightness, and battery was just "what" kind of headshake about invasiveness. Somebody'd hand wave they need it (we want it, we want it). They obviously don't.

Well the why the ad industry wants it is clear: fingerprinting and segmentation. Someone consistently low on battery? Push them ads for powerbanks.

Post reply on HN