Monday, June 16, 2025

Going Meta with a meat ax

 Vitor Pamplona

How do Facebook and Instagram apps track what you do in the browser, even in incognito mode?

Meta apps start a local server on the phone and keep it running in the background. The Meta analytics script, running on most websites, pings any "localhost" server with the anonymized tracker ID for that session. The app then associates the browser ID with your Meta account, and voilà, all your browsing history is now linked to your Facebook account.

Android is designed to block such things, but Meta found a workaround using basic Sockets and transmitting the tracker ID in the initial handshake of a WebRTC (voice call) request. It's genius and evil as fuck.

No comments:

Post a Comment

The largest democratic poverty alleviation in human history

  Three men you’ve probably never heard of—P.V. Narasimha Rao, Manmohan Singh, Montek Singh Ahluwalia—may be the three most important people...