Meta and Yandex are de-anonymizing Android users' web browsing identifiers
a year ago
- #security
- #privacy
- #tracking
- Meta and Yandex embed tracking code into websites, de-anonymizing visitors by abusing Internet protocols.
- Chrome and other browsers send unique identifiers to native apps, allowing conversion of web IDs into persistent mobile app user identities.
- Meta Pixel and Yandex Metrica trackers bypass Android and browser security protections like sandboxing and storage partitioning.
- The tracking breaks the sandbox principle, allowing interaction between mobile and web contexts.
- Yandex started this bypass in 2017, Meta in September 2023, linking browsing history to app account holders.