Live data from Hacker News

Covert web-to-app tracking via localhost on Android

localmess.github.io

101–110 of 356 posts

Re: Covert web-to-app tracking via localhost on Android

#101
post #16
post #9

Earlier quoted context omitted.

If only uMatrix was still developed/supported.

It still works very well. I'm using it on both Linux and Android. The UI is far better than its replacement inside uBO.

The uBO functionality isn't a legitimate replacement. I don't understand how that came to pass.

Re: Covert web-to-app tracking via localhost on Android

#103

Earlier quoted context omitted.

The question is how do you ban it, and then how do you prove that people are breaking those rules?

https://news.ycombinator.com/item?id=43595269

I like the idea, but where do you draw the line on what advertising is.

Is affiliate marketing still allowed? Are influencers allowed to take payment? Can people be a spokesperson for a company? Can newspapers run commentary about businesses? Can companies pay to be vendors at a conference?

No matter where you end up drawing the line you’re just shifting the problems somewhere else. Look at the amount of money Meta and Google make, the incentive is just too large.

Re: Covert web-to-app tracking via localhost on Android

#104

Earlier quoted context omitted.

So main application for WebRTC is de-anonymisation of users (for example getting their local IP address). Why it is not hidden behind permission I don't understand.

The existing killer app for WebRTC is video chat without installing an app, which is huge. Other P2P uses are very cool and interesting as well - abusing it for fingerprinting is just that, abusing a user-positive feature and twisting it for identification, just like a million other browser features.

You mean just like a million other "user-positive" browser features pushed by the biggest tracking company there is.

Re: Covert web-to-app tracking via localhost on Android

#105

A commenter mentioned [1] that major Russian apps now all ask for permission to read a unique device ID to deanonymize users. The people that stopped Intel from adding such an ID to their CPUs had perfect foresight [2] (too bad later Intel added it anyway). But then it's not hard to guess that if you include a feature whose purpose is to attack the user, it will be used to attack the user. [1] https://arstechnica.com…

>A commenter mentioned [1] that major Russian apps now all ask for permission to read a unique device ID to deanonymize users.

To be fair it's not really limited to Russian apps. Many popular apps on play store have it as well:

https://play.google.com/store/apps/details?id=org.telegram.m...

https://play.google.com/store/apps/details?id=com.microsoft....

https://play.google.com/store/apps/details?id=com.pinterest&...

Re: Covert web-to-app tracking via localhost on Android

#107

I wish we could just ban advertising and tracking on the internet. I feel like so much crap these days has come out of it, all so that CEOs can afford an extra yacht

>all so that CEOs can afford an extra yacht ...and so consumers can use services/products without having to fork over money. People love the ad-model. Given the option to pay or use the "ad-supported" option, the ad-supported one wins 10 to 1. This means in many cases it doesn't even make sense to have a paid option, because the ad option is just so much more popular. As bad as crypto is, with all the negative things…

There is no such thing as a free lunch. Consumers on average are forking over the money. Otherwise no one would pay for advertising. And they are paying more than they would have otherwise since this dystopian tracking apparatus isn't free either.

Re: Covert web-to-app tracking via localhost on Android

#108

I wish we could just ban advertising and tracking on the internet. I feel like so much crap these days has come out of it, all so that CEOs can afford an extra yacht

This type of thing is pure greed, completely distinct from a highly aggressive pursuit of far more lucrative opportunities that average businessmen have been able to accomplish in the extreme interest of their shareholders.

Those true leaders are the traditional examples who have shown success over the centuries, without letting any greed whatsoever become a dominant force, recognizing and moving in the opposite direction from those driven by overblown self-interest, who naturally have little else to offer. It can be really disgraceful these days but people don't seem to care any more.

That's one thing that made them average businessmen though.

Now if you're below-average I understand, but most companies' shareholders would be better off with a non-greedy CEO, who outperforms by steering away from underhanded low-class behavior instead.

Now if greed is the only thing on the table, and somebody like a CEO or decision-making executive hammers away using his only little tool with admirable perseverance long enough, it does seem to have a likelihood of bringing in money that would not have otherwise come in.

This can be leveraged too, by sometimes even greedier forces.

All you can do is laugh, those shareholders might be satisfied, but just imagine what an average person could do with that kind of resources. It would put the greedy cretins to shame on their own terms.

And if you could find an honest above-average CEO, woo hoo !

Post reply on HN