Live data from Hacker News

Verizon Wireless injecting tracking UIDs into HTTP requests

news.ycombinator.com

141–150 of 151 posts

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#141

https://www.verizonwireless.com/b2c/support/customer-agreeme... " We collect personal information about you. We gather some information through our relationship with you, such as information about the quantity, technical configuration, type, destination and amount of your use of our telecommunications services. You can find out how we use, share and protect the information we collect about you in the Verizon Privacy…

I believe Verizon is violating their customer agreement here. From the looks of it, the tracking header provides a way for websites not affiliated with Verizon to build profiles on users as they travel across the internet. Rogue tracking networks could be built on this.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#142
post #138

Earlier quoted context omitted.

There is no public, global network of networks besides the one known as the Internet, and it exclusively uses the Internet Protocol suite.

Thinking TCP/IP = IP is also a bit of a faux pas. No fair changing the terms I used out from underneath me and then complaining. Further... again, go check your contract for your home provider. I'm quite confident it doesn't promise to "serve IP packets", let alone making any promise whatsoever to serve them without modification. Don't lose sight of the context here... pedanting about what protocol is in use isn't go…

I didn't say Internet Protocol, I said the Internet Protocol Suite.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#144
post #80

Just checked my Verizon 4G LTE MiFi and the headers are not there, I've not done anything special to my account settings. On ATT I see the X-Acr thing but not clear if it's UID like or not in nature, would need to see more of them.

I just checked my AT&T phone and I have an X-Acr header too.

Same, I've opted out here and I still get it:

http://www.att.com/gen/privacy-policy?pid=24339

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#146
post #46

Earlier quoted context omitted.

I just tested mine, but the situation is a bit complicated. My service is with T-mobile in the US, but I am currently connecting through Movistar Chile. The response from the website was: > did not receive X-UIDH header. So I presume I can say that Movistar Chile is not inserting that into the header. Not sure about T-Mobile (US) though.

If you are roaming and using the T-Mobile APN, then you're still going through the T-Mobile data infrastructure. When you're in China and roaming on a foreign operator, you're not affected by the Great Firewall since you're data goes through the APN in your home country.

Okay, thanks for the clarification. I did just check and I have an American geolocated IP, consistent with what you said.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#147
post #14

This makes me rather unhappy. I'm seeing this on Verizon. Can someone with an alternative mobile provider like Sprint or T-Mobile test this, too?

> This makes me rather unhappy. I'm seeing this on Verizon. Can someone with an alternative mobile provider like Sprint or T-Mobile test this, too? I would guess that voting with your feet would be the most effective response. While many think consumers don't care (or don't understand), we can see many vendors beginning to emphasize confidentiality features.

I'm not sure if I value my confidentiality more than the unlimited talk/data/text plan on which I'm grandfathered. It's a hard change to make, especially considering I no longer see the tracking data after I disabled it in my settings.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#149
post #80

Just checked my Verizon 4G LTE MiFi and the headers are not there, I've not done anything special to my account settings. On ATT I see the X-Acr thing but not clear if it's UID like or not in nature, would need to see more of them.

I just checked my AT&T phone and I have an X-Acr header too.

Just checked my phone and I have "do not track" turned on and x-acr is tracking. Who/what is it? Why? How do I stop it?

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#150
post #80

Just checked my Verizon 4G LTE MiFi and the headers are not there, I've not done anything special to my account settings. On ATT I see the X-Acr thing but not clear if it's UID like or not in nature, would need to see more of them.

I just checked my AT&T phone and I have an X-Acr header too.

Checked over data not WiFi
Post reply on HN