Meta and Yandex are de-anonymizing Android users' web browsing identifiers

Re:Meta and Yandex are de-anonymizing Android users' web bro... by NoahZuniga on Wednesday June 04, 2025 @12:31AM (#44177254)

This is not unique to WebRTC. The same result could be achieved by sending a http request to localhost. The only difference in this case is that using WebRTC doesn't log a http request

[ Parent | on HN ]

Re:Meta and Yandex are de-anonymizing Android users' web bro... by codedokode on Wednesday June 04, 2025 @03:11AM (#44177972)

The browser could refuse to connect to localhost. I think there are browsers that refuse (i.e. to prevent attacking a router config interface).

[ Parent | on HN ]

Re:Meta and Yandex are de-anonymizing Android users' web bro... by iforgotpassword on Wednesday June 04, 2025 @05:54AM (#44178987)

I doubt anyone is running a browser on their router.

But still, you could do the same for stun, turn, sdp. Disallow local host.

[ Parent | on HN ]

Re:Meta and Yandex are de-anonymizing Android users' web bro... by jeroenhd on Wednesday June 04, 2025 @09:25AM (#44180488)

That's literally what browsers have done (for STUN) and are working on (for TURN).

[ Parent | on HN ]