Thread 105683300

>Meta devised an ingenious system (“localhost tracking”) that bypassed Android’s sandbox protections to identify you while browsing on your mobile phone — even if you used a VPN, the browser’s incognito mode, and refused or deleted cookies in every session.

https://www.zeropartydata.es/p/localhost-tracking-explained-it-could

These are the things I have learned from this story:
1. The android "sandbox" system is a meme
2. VPNs are worthless
3. You should install as few apps as possible
4. This is only the tip of the iceberg

Am I correct with my assumptions?

>>105683300 (OP)
stop spamming this

>>105683300 (OP)
there is no iceberg. law enforcment is extremely incompetent and corperations only care about what makes them a profit. you can download child porn on windows and nothing will happen, but when you pirate something on windows it will prevent you from opening the file.

>>105683300 (OP)
If anything was secure, firms like Pegasus would seize to exist. Instead it feels like they confidently plan ahead, knowing they can track, exploit, backdoor, a million different ways.

>>105683300 (OP)
Forgot another point:

5. It doesn't matter which browser you use

>>105683300 (OP)
>Only affects jeetdroid

Ofcourse

>>105683300 (OP)
Browser vendors are at fault here. Why the fuck do those niggers expose literally everything about my hardware to random ass website. No, you don't need to know my GPU brand. Firefox could cause pain to fingerprinting kikes overnight if they returned null in all API interfaces that return pointless user information. Same goes for localhost scanning, disable that nigger shit by default.
You can mitigate this by blocking javascript but it won't address the issue of apps localhost fingerprinting other apps.
It's easily mitigated with iptables rules but Jewgle would never implement app level security of this level.

Even if you do use their platform, why would you ever install the app? Just use a browser to access it. It works just as well.

>>105683449
It's a retarded article since this technique has been around for ages and it's not just Meta but the point is that any random website could fingerprint your local apps because there is literally nothing stopping them by default from running full nmap against your system. Especially now that nigger WASM is a thing.

>>105683300 (OP)
you can't cuck the zuck, when will you guys learn?

>>105683326
> it will prevent you from opening the file.
never had this problem
stop spreading bullshit Linjeet

>>105683300 (OP)
>visit website
>NOOOOOOOOOOOOOOOOOOOOOOOO DONT TRACK ME BRO
Retarded just don't visit the kike website how hard is that?

>>105683300 (OP)
>The combined theoretical maximum risk amounts to approximately €32 billion** (4% + 6% + 10% of Meta’s global annual revenue, which surpassed €164 billion in 2024).
they've already budgeted for this, the fine is just a cost of doing business

>>105683326
>Retard doesn't understand the different between media files and executable files
Kill yourself. btw you're not prevented from running the software at all as it will be indential to the retail software. It will just bitch at you for a license generally. What you're talking about is cracking software and no shit windows will go
>never seen that hash before
When you run
>fuckmyshit.exe
dumb fuck.

>>105683300 (OP)
>(i) The Facebook or Instagram app running in the background on your phone, even when you’re not using it.
Don't have either installed.

This is not fair. Mark doesn't have that much money in the bank. How can they do this?

>>105683300 (OP)
>You should install as few apps as possible
i don't know if it helps but i use a firewall and block all ops from wifi and cell unless i am using them. i have to turn it off for that application when i go to use it but it's not that big of a deal.

>>105684031
enjoy having zero social life. i was out with a girl today she asked me do you have insta can i add you?
and i do despite never having posted anything to it because of situations like this

>>105683300 (OP)
>3. You should install as few apps as possible
Problem is that Facebook (formerly: Facebook) cancer is installed on mobile vendors phones. Unless you specfically and intentionally buy an unlocked phone, delete the "OEM"/mobile partitions (and even then if you have a SIM card with shit pre-loaded...) you can never be sure the Facebook cancer is gone.

>>105683300 (OP)
This person so poorly explains how it works that going to the researcher's website he links is better.

>>105683300 (OP)
This is literal fucking malware.

>>105683339
>would seize to exist
It's a doggie-dog world, after all.

>>105683300 (OP)
>Meta Pixel
so it only affects websites which are owned by Meta
but I never visit such websites, so I have nothing to worry about

>>105683326
>law enforcment is extremely incompetent and corperations only care about what makes them a profit

This. So much this

Instead of expecting corpos to play nice, start expecting your governments and regulators to do their jobs.

>>105684101
>enjoy having zero social life.
I do.

>>105684101
If you'd rather have shallow social connections with normalfags who don't give a shit about you than partake in basic steps to secure your values, you're a cuck
At the very least if you're going to play the normalfag game, demand that she use something like matrix

>>105684198
>start expecting the government to do its job

>>105683300 (OP)
> The Facebook or Instagram app running in the background on your phone, even when you’re not using it.
Like I would EVER have that running on my phone.

Also, how is something this basic something that took companies decades to figure out?

>>105684101
Even if you absolutely need to use botnet services, there's no reason not to do some damage control. Just having the app installed is usually enough to fly under normies' schizo radar.

>>105684015
And yet they will play American theater and scream and cry and about "muh communism!!!".

>>105684297
wasm

>>105684268
those bad drawings are supposed to convey something ?

>>105684487
I know who the characters are and where they come from and they convey fuck all

>only applies to android
lol

>>105683300 (OP)
>You’re not affected if (and only if)
>You always used the Brave browser
Bravechads just can’t stop winning

>>105683300 (OP)
OP is a massive FAGGOT for not posting the proper source
https://localmess.github.io/
>captcha:MAMM

there's this particular sort of retard on /g/ that reads an article, doesn't quite understand it, and comes here to spread fud about longstanding good opsec practices. like using a vpn in this case

>>105684101
someone who would be "put off" by someone else not having social media isn't someone worth my time in the first place

>WebRTC
>Facebook or Instagram app
At this point you don't really care about your data in the first place

>>105683326
>you can download child porn on windows
Actually Microsoft scans all your files and cross references them with their own internal database of child porn (seriously) and notifies authorities.

>install wiretap app
>ohh no it's eavesdropping on me

its all a nothingburger. it doesnt affect you if you have a up to date chrome browser. the lesson is dont use outdated browsers like edge or firefox.

>>105683300 (OP)
Why didn't Zuck just bribe the jeet CEO of Google by sending bobs and vagene?

>>105683826
M$1 has been deposited into your Bing wallet. All hail Larry Ellison!

>>105685283
They don't do this.
No I won't explain how I know.

>>105685325
Zuck can have all the bobs and vagene he wants anon, he's in the billionaire cabal. Even forbidden underage bobs and vagene

>>105683300 (OP)
And what's the business justification for wanting to track people not even using your app?

https://localmess.github.io/
Actual relevant link

>>105684537
Apparently it would work on iOS, feature wise, but it's more likely Apple wouldn't allow the app in the AppStore if it was opening listening ports on localhost for no apparent reason.

>>105685612
What do you mean? Data is money.

>>105684101
Pathetic.

>>105686220
It was already posted

>>105685283
works on my machine

>>105683430
Because Google decided they wanted those APIs and added them in. Now everyone has to follow along otherwise random shit breaks because Google has deemed it to be so.

Almost everything shitty in webrowsers you can pin on google.

>>105684191
>so it only affects websites which are owned by Meta
No, you stupid asshole.

When is it going to be enough? Does the tolerance of the people not have its limits?

>>105683406
still better than the ipoo pro max where the entire device is one big piece of malware

>>105684101
>girl
anon, I ...

>>105683300 (OP)
>>105683449
>>105684031
Doesn't werk on my machine, kek.
Buy a better phone faggits

Will apps like insular or shelter mitigate this?
Like faceberg or other spyware apps only could spy on the "work profile" and not whole phone

>>105683300 (OP)
Meta did nothing wrong. Blame Android for being a swiss cheese mess of holes and poor design. Also, the Russians did this first with their yandex apps.

>>105683300 (OP)
why did browsers allow cross origin localhost from insert-site-here, at all?

>>105684101
where do you think you are nigger faggot? fuck off.

>>105689472
>bank leaves vault unlocked
>i walk in and steal everything
>i did nothing wrong
ok

>>105683762
I fucked his wife in the ass and he will never know lol

>>105689546
not all browsers were affected
>brave wins again

>>105686334
rapist mentality can't simply take "no" for an answer

>>105683300 (OP)
>sandbox, VPN
All security systems are worthless if the user actively installs malware. In this case all Zuckerware is malware.

What's truly weird is that the article doesn't mention WhatsApp at all.

This would explain why Instagram started sending me videos of little girls dancing after I read doujins on my phone (no Mr CIA I don't care about real life girls and my history of clicking "don't recommend me this" on hundreds of Instagram and TikTok videos proves it.)

>>105689337
Nothing can mitigate this except not allowing these apps to run in the background and/or removing their ability to connect to the network.

These start listening on a port for incoming packets, then when the user opens a website with a Meta tracking pixel it sends the tracking information about the user to the listening port, then the apps uploads the information to Facebook servers.

There is no sandboxing that can stop this because it's just an app doing app things. Google doesn't allow users to turn off app's network connections precisely because it allows them to better track users.

>>105684002
Because every website is kiked now. It's unavoidable.

>>105684101
>enjoy having zero social life
GTFO normalfag

>>105683300 (OP)
Always remove whatever crap comes integrated and don't install random apps in your phone, and if you do, restrict them as much as possible.
Use Firefox + ublock origin as your main web browser, and lock it down as much as possible.
Don't use VPNs or do bad shit in a device you don't control, retard.

>>105683326
>law enforcment is extremely incompetent and corperations only care about what makes them a profit
They have an obligation to inform if they are asked, retard... In this case, both Meta and Yandex could fuck you in the ass if they wanted to.

>>105683339
That has nothing to do with this

>>105689920
>Google doesn't allow users to turn off app's network connections precisely because it allows them to better track users.
This is the mitigation- various world governments kicking Google in the balls over and over until they stop

>>105685364
Thanks for the clarification glowie

>>105690736
I forgot to mention the most important measure: disable the AAID.

>>105688037
kek

Article was shit.

It's spyware, if we changed the wording to usernames, session logins etc
This should not be considered matter of consent, but a crime.

>>105685283
if iJeetOS does it how can I reasonably expect NSAglowniggerOS not to do the same?

>>105683300 (OP)
>Meta devised an ingenious system
except they didn't, it's been known forever, they simply exploited it at the largest scale

>>105688933
Enjoy your ad riddled experience.

>>105688933
memory management in android is flawed in it's core. I wish it was like a proper OS never close shit until i really need even if that means the whole thing crashes.

>>105692349
Stop embarrassing yourself mate. I also don't use facebook or any other social media slop except chance for 4chinz anyway, by the way.

>>105692361
Maybe it is, but the process management is fine. There are no background services or activities except the bare minimum that I allow running on my phone.

>>105687941
I'm retarded, jealous?