Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CBP tapped into the online advertising ecosystem to track peoples’ movements

404media.co

Post reply on HN
Print view View original

141–150 of 217 posts

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#141

Post by OhioMan2943 »

Cider9986 wrote: post #87
Zak wrote: post #66

I have never regretted my decision to aggressively block ads on every device I use, and to shun devices where I can't.

I am not sure that ad blocking is enough now or in the future as fingerprinting is extremely hard to fight while keeping a convenient web experience. Of course, continue blocking for convenience, but for privacy, more robust solutions are needed. Try to beat this: https://fingerprint.com

Use Mullvad Browser or Brave (both require no extensions to block ads, with mullvad browser being modelled off of tor. Use data traffic fingerprint obfuscation even behind vpn (yes they can tell if you're messaging, watching a video, torrenting, etc 90% of the time even behind vpn) use mullvads daita (makes packets the same size) or nymvpn (mixnet with tor like routing and in built delays). Tor doesn't protect against traffic analysis at all.

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#143

Post by Scrounger »

giobox wrote: post #130
Cider9986 wrote: post #87

Earlier quoted context omitted.

I am not sure that ad blocking is enough now or in the future as fingerprinting is extremely hard to fight while keeping a convenient web experience. Of course, continue blocking for convenience, but for privacy, more robust solutions are needed. Try to beat this: https://fingerprint.com

The EFF's fingerprint test is nice in that it breaks down a lot of the bits of data used, and lets you know how you compare etc: > https://coveryourtracks.eff.org/ You quickly discover how difficult it really is to avoid a unique fingerprint. Lots of folks in this thread are focusing on DNS and VPN to avoid detection, which of course can help, but a huge number of identifiable bits come from your browser's APIs: User…

> https://coveryourtracks.eff.org/

I get "Our tests indicate that you have some protection against Web tracking, but it has some gaps." but nothing of too much importance I think.

I use a VPN and NextDNS.io.

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#144

Post by mulmen »

daft_pink wrote: post #33

There’s literally a flock camera at basically every street location that one suburb borders another where I live. There’s really not any legal practical way to avoid ALPRs. I’m pretty sure the government knows where I am 24/7. I’m not going to worry about targeted advertising by the government anymore and just worry about it the people reselling it to non-governments for use.

Weird take. Lots of examples recently of municipalities taking down Flock cameras. It's not a lost cause.

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#145

Post by Scrounger »

Zak wrote: post #83
derwiki wrote: post #60

Earlier quoted context omitted.

100%, this has been my soap box for years. A very easy, effective, multi-layer setup: 1. Browser adblocker 2. Pi hole running locally 3. Pi hole at your home network router level And 4, not as easy but effective, a firewall like Little Snitch Edit: the other good news is your old data loses value quickly, so starting today is still very effective: you haven’t missed the boat yet!

This doesn't cover in-app adds on phones over mobile data, which is probably the main vector for the tracking discussed in the article. For that: 1. Adblocking via private DNS (e.g. https://mullvad.net/en/help/dns-over-https-and-dns-over-tls ) 2. Prefer websites over native apps wherever possible 3. Browser adblocker Hosts file adblocking is also possible on a phone where you have root.

This is what I do... I use Mullvad VPN with NextDNS.io for DNS.

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#146

Post by mulmen »

SoftTalker wrote: post #50
kirth_gersen wrote: post #15

Earlier quoted context omitted.

Most have internal batteries and are still "on" to a certain extent unless the battery is completely discharged.

It's "on" enough to detect the activity needed to wake it back up. But will a powered-off phone still be pinging cell towers or making WiFi requests?

Yes, that's how Find My works.

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#147

Post by mulmen »

kube-system wrote: post #99
catlikesshrimp wrote: post #26

Earlier quoted context omitted.

If you cover your phone with an antielectrostatic bag it can't communicate; that is a Faraday cage. Since people around you will think you are also wearing a tinfoil hard, you had better stick to the phones with hardware switches as sibling comment mentions

Most of those bags are total BS

Seems easy to verify with an iPhone. Put it in the bag, transport the phone, look it up on Find My.

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#148

Post by giobox »

Scrounger wrote: post #143
giobox wrote: post #130

Earlier quoted context omitted.

The EFF's fingerprint test is nice in that it breaks down a lot of the bits of data used, and lets you know how you compare etc: > https://coveryourtracks.eff.org/ You quickly discover how difficult it really is to avoid a unique fingerprint. Lots of folks in this thread are focusing on DNS and VPN to avoid detection, which of course can help, but a huge number of identifiable bits come from your browser's APIs: User…

> https://coveryourtracks.eff.org/ I get "Our tests indicate that you have some protection against Web tracking, but it has some gaps." but nothing of too much importance I think. I use a VPN and NextDNS.io.

The real test is whether the site believes you to be unique, which is listed separately. It reports me as "Our tests indicate that you have strong protection against Web tracking.", but I'm still uniquely identifiable.

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#149

Post by dakolli »

giobox wrote: post #130
Cider9986 wrote: post #87

Earlier quoted context omitted.

I am not sure that ad blocking is enough now or in the future as fingerprinting is extremely hard to fight while keeping a convenient web experience. Of course, continue blocking for convenience, but for privacy, more robust solutions are needed. Try to beat this: https://fingerprint.com

The EFF's fingerprint test is nice in that it breaks down a lot of the bits of data used, and lets you know how you compare etc: > https://coveryourtracks.eff.org/ You quickly discover how difficult it really is to avoid a unique fingerprint. Lots of folks in this thread are focusing on DNS and VPN to avoid detection, which of course can help, but a huge number of identifiable bits come from your browser's APIs: User…

Do not trust the EFF !!!

Re: CBP tapped into the online advertising ecosystem to track peoples’ movements

#150

Post by dakolli »

Scrounger wrote: post #138
Cider9986 wrote: post #87

Earlier quoted context omitted.

I am not sure that ad blocking is enough now or in the future as fingerprinting is extremely hard to fight while keeping a convenient web experience. Of course, continue blocking for convenience, but for privacy, more robust solutions are needed. Try to beat this: https://fingerprint.com

> Try to beat this: https://fingerprint.com I beat it, I think... nothing much there. I use a VPN and NextDNS.io.

you can't beat it with a VPN, or any sort of networking only solution, only your browser can prevent fingerprinting. The hash is generated on a combination of heuristics but usually based on canvas fingerprinting. Network fingerprinting is not reliable.

https://browserleaks.com/

Post reply on HN