Everyone knows your location: tracking myself down through in-app ads

Re:Everyone knows your location: tracking myself down throug... by sunnybeetroot on Sunday February 02, 2025 @01:42PM (#42910683)

Whilst I trust that the author did in fact look at the data of each request eventually, the screenshot they provided of Charles could not have been of the exact requests they intercepted given Charles is indicating that those are not yet SSL proxied (except for the 2 GET requests).

EDIT: please ignore, author did it differently to what I expected.

[ Parent | on HN ]

Re:Everyone knows your location: tracking myself down throug... by timsh on Sunday February 02, 2025 @02:25PM (#42911002)

I decrypted them all by installing Charles SSL cert on the iphone. This is why the requests seem not SSL proxied.

[ Parent | on HN ]

Re:Everyone knows your location: tracking myself down throug... by sunnybeetroot on Sunday February 02, 2025 @02:29PM (#42911034)

My apologies, thank you for clarifying and thank you for the brilliant article. Have updated my comment.

[ Parent | on HN ]

Re:Everyone knows your location: tracking myself down throug... by wkat4242 on Sunday February 02, 2025 @09:55PM (#42914411)

This technique doesn't work anymore on android because you can no longer add certificates to the system store and apps are free to choose to accept the user store CAs or not. That was changed in Android 7. For "security" they say. Security of Googles business model I'm sure.

[ Parent | on HN ]