Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Verizon Wireless injecting tracking UIDs into HTTP requests

news.ycombinator.com

Post reply on HN
Print view View original

51–60 of 151 posts

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#51

Post by jerf »

youzer wrote: post #20

Let's say I want to send some TCP. That TCP happens to kind of look like HTTP, but it's not. It's just some protocol I made up which looks HTTPish enough to trigger this injection. Doesn't that mean that Verizon isn't actually offering TCP/IP (Internet) access, since they corrupt my protocol stream in transit? Shoudln't that mean they should be charged with fraud if they continue to advertise the fact that they provi…

"Doesn't that mean that Verizon isn't actually offering TCP/IP (Internet) access, since they corrupt my protocol stream in transit?"

This is a serious answer: Go back and look at what they actually promise to deliver. Bet it doesn't have the word "TCP" in it anywhere. You can't hit them with contract violation when they aren't in violation of their contract. (Well, you can lodge any lawsuit you like. But it won't go well for you.)

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#52

Post by ToastyMallows »

higherpurpose wrote: post #36
ArtDev wrote: post #29

This looks like a job for Tunnelbear VPN! https://www.tunnelbear.com/ I am huge fan since I starting using it when traveling Europe. The mobile version works great as well.

Whatever you do, do not uninstall TunnelBear! http://i.imgur.com/1YQfGRN.png

TunnelBear probably has the best branding I've seen in the while, very well executed.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#53

Post by philipcristiano »

jo_ wrote: post #14

This makes me rather unhappy. I'm seeing this on Verizon. Can someone with an alternative mobile provider like Sprint or T-Mobile test this, too?

At least with that page I "did not receive X-UIDH header" on T-Mobile. Didn't check for headers with other names.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#54

Post by jonah »

robflynn wrote: post #45
emrikol wrote: post #44

Earlier quoted context omitted.

Using and ad blocker? I disabled mine and that section showed up.

I can confirm that disabling adblock allows these settings to show up.

Even with ad blockers disabled, I only see CPNI settings (which I'd already set to "Don't Share") at https://wbillpay.verizonwireless.com/vzw/accountholder/profi...

http://uidh.crud.net/ also says "did not receive X-UIDH header."

California, Verizon Wireless, Business Account, not on contract.

EDIT: Now an hour later, the headers DO appear. No setting to disable on the VZW site though.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#55

Post by evilduck »

gergles wrote: post #17

They don't appear to be doing this if you've opted out of "Relevant Mobile Advertising", which is another option [separate from CPNI] on http://verizonwireless.com/myprivacy . Here's the setting you're looking for: http://i.imgur.com/QFJJNV5.png Mods may also want to update the title to include "Wireless" after Verizon; Verizon landline is not doing this anywhere AFAIK.

Just checked my configurations, those settings are all set 'off' for my lines (I turned them all off months ago, not just this moment), but the uidh.crud.net site is still receiving the header.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#56

Post by peterwwillis »

youzer wrote: post #20

Let's say I want to send some TCP. That TCP happens to kind of look like HTTP, but it's not. It's just some protocol I made up which looks HTTPish enough to trigger this injection. Doesn't that mean that Verizon isn't actually offering TCP/IP (Internet) access, since they corrupt my protocol stream in transit? Shoudln't that mean they should be charged with fraud if they continue to advertise the fact that they provi…

When most mobile providers get you on the internet, it's through NAT. They're already terminating and re-creating your connections for you, and not providing your "real" tcp/ip packets to the internet, and thus neither the world's "real" internet packets to you. All you get is a translation.

You've never gotten "the real internet" on a mobile device. The idea that they may change one more part of your fake connection seems pretty irrelevant.

The same happens on "real" routers, firewalls, etc when they massage the traffic going through them. Sometimes they barely change anything at all. Sometimes they make minor adjustments. Sometimes major ones. You don't have an agreement with any of them specifically to modify your packets; they just do. So do you have a claim of harassment against your packets? Have they trespassed on your property? Are you trespassing on their routers?

The answer to all these questions is: nobody has ever guaranteed to you what you get from the internet, other than "availability" if you're a business user, and even that's not set in stone.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#57

Post by [deleted] »

ewzimm wrote: post #23
gergles wrote: post #17

They don't appear to be doing this if you've opted out of "Relevant Mobile Advertising", which is another option [separate from CPNI] on http://verizonwireless.com/myprivacy . Here's the setting you're looking for: http://i.imgur.com/QFJJNV5.png Mods may also want to update the title to include "Wireless" after Verizon; Verizon landline is not doing this anywhere AFAIK.

I have a prepaid account, and I'm not allowed to change privacy settings either online or over the phone. The web tells me I am an account member and not owner, and the phone just says prepaid is not eligible to opt out. I can fix it by using a VPN, but isn't it illegal to not even allow me to opt out? Postpaid is significantly more expensive than prepaid and not available to people with bad credit. How can they disc…

[deleted]

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#58

Post by sjs382 »

evilduck wrote: post #55
gergles wrote: post #17

They don't appear to be doing this if you've opted out of "Relevant Mobile Advertising", which is another option [separate from CPNI] on http://verizonwireless.com/myprivacy . Here's the setting you're looking for: http://i.imgur.com/QFJJNV5.png Mods may also want to update the title to include "Wireless" after Verizon; Verizon landline is not doing this anywhere AFAIK.

Just checked my configurations, those settings are all set 'off' for my lines (I turned them all off months ago, not just this moment), but the uidh.crud.net site is still receiving the header.

Likewise. They were set to off when I visited the page and the header still shows.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#60

Post by Karunamon »

emrikol wrote: post #44
Karunamon wrote: post #43

Earlier quoted context omitted.

That setting doesn't exist on my version of the page.. I get a link to "more information" on "Verizon Selects", but none of my lines are listed there. I'm going to make a few phone calls...

Using and ad blocker? I disabled mine and that section showed up.

That did it! Thanks!
Post reply on HN