Live data from Hacker News

Tell HN: Google is correlating location data to your IP

news.ycombinator.com

51–60 of 135 posts

Re: Tell HN: Google is correlating location data to your IP

#51
post #5

Every single advertising company is exploiting every single side channel that they can. This should not surprise you.

Sure. And in this case, they're showing me irrelevant ads, shopping results I can't use and more. It's not surprising me, it's baffling me because it's just stupid to do this .

Works for the 99.9% not using a VPN. They don't care about the last few users.

Re: Tell HN: Google is correlating location data to your IP

#53

I recently bought a brand new pair of golf shoes from a physical store. I did not even search for them or look at any golf shoes online. The next day, I got Google ads served for the same brand of shoes I bought... Coincidence? Seemed very creepy. I know they sometimes do "re-tageting", but in this case I am sure I didn't look at any stores online. Only the fact that I physically visited a store with my tracking devi…

FB (and to a lesser extent google) allow targeting via phone numbers, emails, and addresses.

This [1] shows the attributes Facebook Custom Audiences allows match on, and it includes email, phone, first/last name, address, dob, and age. So if any of those were shared with the store, they can upload them to FB (and very similar to Google) to show you ads.

[1] https://www.facebook.com/business/help/2082575038703844?id=2...

Re: Tell HN: Google is correlating location data to your IP

#54
post #49
post #27

Earlier quoted context omitted.

In a http request/response, mac address would be meta data. ARP is not a thing there. That would be an example of data snaffling.

Do you have any info on this? AFAIK, MAC is only distributed in datalink layer around local connections. I tried some quick packet sniffing browsing Google and did not see my MAC transmitted—as I’d expect (bc like you said, ARP not thing at this layer) also research on “MAC included in http metadata” turns up no results… If you have any more info on this I’d love to learn more—as I’m puzzled to know why this would ha…

I think the poster isn’t talking about the remote server seeing client MACs (because, as you say) but, rather, about the way mobile OSes use nearby wifi access point SSIDs to provide GPS-less geolocation. Samy Kamkar raised my awareness of this way back in 2010 or so, and this article about his DefCon talk provides a good quick explanation: https://www.bbc.com/news/technology-10850875.

Re: Tell HN: Google is correlating location data to your IP

#56

Not you IP address but your router/access point's MAC address and been doing it for many years. For example, I receive quite a few devices for reviews, and I mostly give things away after using those. Many years ago, I gave a friend in another city a router. For a few weeks his computer and other devices reported his location as being my city instead of his. It took a couple of weeks for Google services to catch up.…

How do they get mac address from HTTP requests?

They can get it if you log into your Android TV!

I believe they also track and log other Wifi networks that you arnt even connected to.

I'm sure they gather all sort of other metrics from any sensors and signals they can access.

Re: Tell HN: Google is correlating location data to your IP

#57
post #52

Google changes the UI language in its first party apps based on IP, which is a much bigger deal than advertisers chosing to send Spanish ads to people who spend time in Spanish language countries.

Not just that, I also constantly get German Wikipedia articles as top result when my browser and OS are set to English. If it were only the UI, that would be better because I know the buttons by heart already (not a given for every user, of course).

I've always wondered what I'm supposed to do when on holiday in a country with a different script that I can't make heads or tails of. I'll have to practice my japanese or amharic then I guess?

The other extreme is DDG which will try to find English results for a query that very clearly uses Dutch words, matching pages that don't have those words on them rather than bringing up the Dutch page that contains all of the keywords.

Re: Tell HN: Google is correlating location data to your IP

#58
You're absolutely right; I've operated a site-to-site VPN tunnel between two locations (tunnel endpoints were on the routers, and both peers were sharing an public IP address).

After a while, Google would associate the IP address of the local side of the tunnel with the location of the remote side of the tunnel.

I assume this is from Android devices connecting to the network on the remote side, being geolocated by Google Play Services, and Google tying this location with the IP address.

Re: Tell HN: Google is correlating location data to your IP

#59

Not you IP address but your router/access point's MAC address and been doing it for many years. For example, I receive quite a few devices for reviews, and I mostly give things away after using those. Many years ago, I gave a friend in another city a router. For a few weeks his computer and other devices reported his location as being my city instead of his. It took a couple of weeks for Google services to catch up.…

How do they get mac address from HTTP requests?

Not from HTTP requests. Android has access to the network stack and location. Google grabs all visible APs around and correlate to your location.

It is way before HTTP even happens. This data is collected while you are driving around, walking down the street, etc.

Re: Tell HN: Google is correlating location data to your IP

#60

Not you IP address but your router/access point's MAC address and been doing it for many years. For example, I receive quite a few devices for reviews, and I mostly give things away after using those. Many years ago, I gave a friend in another city a router. For a few weeks his computer and other devices reported his location as being my city instead of his. It took a couple of weeks for Google services to catch up.…

How do they get mac address from HTTP requests?

[deleted]
Post reply on HN