> Like, remember that thing where cell carriers were literally selling real-time user-specific location data to, essentially, anybody who could pay? And probably still are?

Or before that, when they caught flak for header injection[1]. Which is still a thing according to the "Subscriber ID Headers" section of [2], just gated behind a whitelist instead of sprayed out to everyone. It'd be interesting to know if the rise in HTTPS traffic has reduced the utility of that, or if they've found a mitigation for that inconvenience.

[1] https://www.eff.org/deeplinks/2014/11/verizon-x-uidh

[2] https://docs.adobe.com/content/help/en/analytics/technotes/v...