Live data from Hacker News

Verizon Wireless injecting tracking UIDs into HTTP requests

news.ycombinator.com

81–90 of 151 posts

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#81
post #5

Hmm, confirmed on Verizon 4G LTE network. Can anybody recommend a good VPN service that works on android?

Private Internet Access is a favorite by many. You should check them out if you have a chance. They're supposedly very strong on android

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#83

When I try to 'withdraw consent' for 'Verizon Selects Participation Status', I get this prompt http://imgur.com/sbVpMhR

That's because that program gives you rewards points specifically for sharing your private information [1].

[1] http://time.com/money/3025429/verizon-smart-rewards-loyalty-...

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#84
post #49

Bummer, the iPad (LTE version) sends this tracking information and there is no way to turn it off.

setup a vpn with digitalocean like I do, it's about all we can do.

Well to be clear, on WiFi it does not send the tracking data, only when using the LTE network. That said the only SSL tunnel software I saw was Junos Pulse which is sitting on a ton of bad reviews at the moment because apparently it doesn't work with iOS 8. What VPN software do you use with your iPad?

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#86
post #63
post #23

Earlier quoted context omitted.

I have a prepaid account, and I'm not allowed to change privacy settings either online or over the phone. The web tells me I am an account member and not owner, and the phone just says prepaid is not eligible to opt out. I can fix it by using a VPN, but isn't it illegal to not even allow me to opt out? Postpaid is significantly more expensive than prepaid and not available to people with bad credit. How can they disc…

I'm not clear why you think it would be illegal. There may be rules against not allowing people to opt out, I don't know. But when you ask "How can they discriminate like that?", there's nothing illegal about discriminating on the basis of credit or willingness to pay for a more expensive product.

I can understand discriminating on quality or something like that, but we're talking about not being able to opt out of having your personal information sold. It seems like there should be some kind of a law where that has to be made absolutely clear. It doesn't even seem to be buried anywhere in the Terms of Service, which say:

"Verizon Wireline consumers and certain business customers may opt-out by calling 1-866-483-9700. Verizon Wireless consumer and certain business customers may call 1-800-333-9956."

Only after calling that number are you told you are ineligible because you are prepaid.

This is advertised as a prepaid account, not a personal-information-selling subsidized account. It's also not even really competitive with other plans. Verizon gives you up to 1GB/month for $45, only with recurring payments, while Cricket gives you 10GB 4G with unlimited throttled data for $55. Unfortunately, Verizon has a monopoly in most of my area. T-Mobile and Sprint don't operate here, and AT&T is spotty.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#87
post #23

Earlier quoted context omitted.

I have a prepaid account, and I'm not allowed to change privacy settings either online or over the phone. The web tells me I am an account member and not owner, and the phone just says prepaid is not eligible to opt out. I can fix it by using a VPN, but isn't it illegal to not even allow me to opt out? Postpaid is significantly more expensive than prepaid and not available to people with bad credit. How can they disc…

> Postpaid is significantly more expensive than prepaid and not available to people with bad credit. How can they discriminate like that? I agree this is terrible, but I should point out that T-mobile's prepaid and postpaid plans are priced the same (and neither requires a contract - only difference is that the latter requires a credit check). If T-mobile is an option for you, I would recommend their prepaid options.…

Thanks for the suggestions, but I really don't want an expensive postpaid contract. I don't even need service every month. WiFi calling is better than cell calling most of the time, and unfortunately, no carrier other than Verizon operates in most of the places around where I live. I'll stick to a VPN.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#88
post #17

They don't appear to be doing this if you've opted out of "Relevant Mobile Advertising", which is another option [separate from CPNI] on http://verizonwireless.com/myprivacy . Here's the setting you're looking for: http://i.imgur.com/QFJJNV5.png Mods may also want to update the title to include "Wireless" after Verizon; Verizon landline is not doing this anywhere AFAIK.

In addition to all of the other users reporting that it isn't actually disabled, they publicly claim that it's disabled for enterprise and government customers but I confirmed that it's still being sent there as well.

Re: Verizon Wireless injecting tracking UIDs into HTTP requests

#90
post #76
post #59

You can view all of your device's request headers at http://checkyourinfo.com/request

I just checked my AT&T iPhone and it includes a "X-Acr" HTTP header that has a long GUID? Is this a similar tracking ID?

Curious, I don't see this but if that's the same acronym used here it's a tracking ID:

http://www.gsma.com/oneapi/anonymous-customer-reference-beta...

Post reply on HN