News for hackers. Stuff that matters.

A comment on Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More. Parent comment

Re:Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinte... by drdrey on Wednesday May 06, 2020 @11:52PM (#23099529)
How does the Facebook SDK in a 3rd party app correlate that you're the same user if you don't log into the app with FB? Is there some universal device identifier all your apps have access to?
[ Parent | on HN ]
Re:Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinte... by simonbr on Thursday May 07, 2020 @01:30AM (#23100013)
There was a static universal device identifier until iOS 6. Even today, while Apple has implemented many sensible restrictions on tracking, there's still a ton of information that can be used for device fingerprinting freely available to all apps. This blog post [0] pegs the amount of useful information at around 56 bits.

[0]: https://nshipster.com/device-identifiers/#fingerprinting-in-...

[ Parent | on HN ]
Re:Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinte... by Nextgrid on Thursday May 07, 2020 @01:15AM (#23099941)
The IP addresses (both WiFi and mobile), device make/model, carrier and locale can be combined into a fairly unique fingerprint, narrowing it down even more over time since the SDK phones home every time the app is opened.
[ Parent | on HN ]
Re:Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinte... by Jarwain on Thursday May 07, 2020 @01:33AM (#23100023)
There's an "advertising id" that's assigned to your phone, accessible by apps you install. This ID can be reset by the user, but only if they are aware of it.
[ Parent | on HN ]
Re:Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinte... by ThePowerOfFuet on Thursday May 07, 2020 @03:49AM (#23100736)
That isn't even as useful as `identifierForVendor`.
[ Parent | on HN ]