News for hackers. Stuff that matters.

A comment on Covert Web-to-App Tracking via Localhost on Android.

Re:Covert Web-to-App Tracking via Localhost on Android by dylan604 on Tuesday June 03, 2025 @09:55AM (#44170217) 

    *: Meta Pixel script was last seen sending via HTTP in Oct 2024, but Facebook and Instagram apps still listen on this port today. They also listen on port 12388 for HTTP, but we have not found any script sending to 12388.
    **: Meta Pixel script sends to these ports, but Meta apps do not listen on them (yet?). We speculate that this behavior could be due to slow/gradual app rollout.
So, could some other app send data to these ports with a fake message? I'm asking for a friend that likes to do things for science.
[ Parent | on HN ]
Re:Covert Web-to-App Tracking via Localhost on Android by fshafique on Tuesday June 03, 2025 @05:07PM (#44174753)
Two ways to f#ck with these trackers - either send them nothing back, or flood them with lots of fake data.

Somebody also needs to come up with a way to peer to peer share advertiser tracking cookies.

[ Parent | on HN ]