Meta and Yandex Exploited Android Loophole to Track Users Across Browsers and Apps
Meta and Yandex have been found to exploit a loophole in Android's architecture, enabling them to de-anonymize users' web browsing activities by linking them to persistent app identities. This tracking method bypasses standard privacy protections, including incognito mode and cookie clearing, raising significant concerns about user privacy.
Researchers from Radboud University, IMDEA Networks, and KU Leuven discovered that Meta's Pixel and Yandex's Metrica tracking scripts, embedded in millions of websites, communicate with their respective Android apps via the device's localhost interface. This communication allows the apps to receive browsing data directly from the browser, effectively linking web activity to user identities within the apps.
The tracking mechanism operates by having the browser-based scripts send data to specific ports on the localhost interface, where the apps are listening. For instance, Meta's apps listen on UDP ports 12580–12585, while Yandex's apps use ports 29009, 29010, 30102, and 30103. This setup enables the apps to collect browsing data, including cookies and metadata, even when users employ privacy measures like incognito mode or VPNs.
ADVERTISEMENT
Meta began implementing this method in September 2024, while Yandex has utilized a similar approach since 2017. The widespread use of Meta Pixel and Yandex Metrica—estimated to be present on 5.8 million and 3 million websites respectively—suggests that a vast number of Android users could be affected.
The discovery has prompted responses from major browser developers. Google has initiated an investigation and is working on mitigations to prevent such tracking techniques. Mozilla is also developing solutions to protect Firefox users on Android from this invasive tracking. Meta has paused the functionality in question and is in discussions with Google to address the issue.
Privacy advocates and experts have expressed alarm over the findings. The method's ability to circumvent standard privacy controls and its potential to be used by malicious actors for surveillance underscore the need for stricter enforcement of privacy standards and greater transparency from tech companies regarding data collection practices.
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Martechvibe
a day ago
- Martechvibe
AdLift Announces the Launch of Tesseract
Tesseract delivers actionable insights for AI-savvy marketing strategies, whether it's identifying brand mentions in ChatGPT outputs or assessing visibility in Google's AI Overviews. Topics News Share Share AdLift Announces the Launch of Tesseract Whatsapp Linkedin AdLift has announced the launch of Tesseract. Tesseract is a tool designed to help brands, agencies, and marketers track and amplify their presence across the rapidly expanding landscape of Large Language Model (LLM) powered search platforms, such as ChatGPT, Gemini, Google AI Overviews, and Perplexity. AdLift Inc., now part of Liqvd Asia, has been at the forefront of innovation, bringing together talent to deliver the best solutions. With Tesseract, they're taking AI-powered marketing to the next level. As AI reshapes the way consumers find and interact with content, traditional SEO methods are fast becoming obsolete. This technology is built to unlock this new frontier, giving brands real-time visibility into how they are being discovered and represented within AI-powered responses. It helps marketers to not only monitor but also optimise their digital footprint where it counts—in the very engines powering the next generation of search. 'Search is undergoing a seismic shift. The dominance of traditional search engines is being challenged by AI-native platforms that interpret and present information differently,' said Prashant Puri, CEO & Co-Founder of AdLift Inc. 'Brands that don't adapt risk becoming invisible in this new landscape. Tesseract is our answer to this challenge—a revolutionary tool that puts brands back in control of their digital destiny.' ALSO READ: Unlike legacy SEO platforms, Tesseract decodes how LLMs display, prioritise, and contextualise brand content. Whether it's identifying brand mentions in ChatGPT outputs or assessing visibility in Google's AI Overviews, the platform delivers actionable insights for AI-savvy marketing strategies. 'AI agents are the future, and businesses are seeing the transformation since their introduction. There's a massive opportunity across industries, and with the Tesseract tool, we are proud to enjoy the first mover advantage of this service,' said Arron Goodin, Managing Director, AdLift Inc. 'As an agency, we are committed towards innovations, helping our clients and building a competitive edge with enhanced efficiency and deeper industry insights.' Arnab Mitra, Founder & Managing Director of Liqvd Asia, commented, 'At Liqvd Asia, innovation is our core. With Tesseract, we're not just responding to the AI revolution—we're shaping it.' 'This product reflects our commitment to empowering brands with cutting-edge solutions that anticipate the future of digital marketing. We believe Tesseract will be a game-changer, enabling brands to thrive in an AI-first world where visibility means everything.' By launching Tesseract, AdLift reaffirms its commitment to pushing the boundaries of digital innovation. ALSO READ:
Fintech News ME
a day ago
- Fintech News ME
Egypt Founder Leads Limited to $7M Raise for Global Stablecoin Banking Expansion
Limited, a US-based next-generation fintech startup offering stablecoin-based global banking services with self-custody, has secured US$7 million in a seed funding round. The round was led by North Island Ventures, with additional participation from existing backers Third Prime and Arche Capital, as well as new investors Collab+Currency and SevenX Ventures. This brings the company's total funding to US$10 million since its founding in 2024. Founded by Hussein Ahmed, an Egyptian entrepreneur, Limited has developed a banking and payments platform that integrates the security of self-custody stablecoins with the functionality of traditional banking services. Available on iOS, Android, and web, the platform is accessible in 176 countries and enables users, both individuals and businesses, to access global payment systems while retaining full control of their funds via self-custody wallets. The platform also includes tiered Visa and Mastercard offerings and cross-border payment tools that support over 300 local payment methods in more than 80 currencies. 'With stablecoin transaction volumes exceeding $30 trillion annually and global remittance fees averaging 6.3%, we've created a solution that finally resolves the traditional tradeoff between self-custody security and ease of use,' said Ahmed. 'This funding will accelerate our growth in high-opportunity markets across Latin America, Southeast Asia, and the Middle East, where demand for borderless financial services is strongest.' Unlike earlier fintech models that largely built on existing financial infrastructure, Limited offers a platform designed from the ground up, merging usability with enterprise-grade security. The company aims to meet the growing demand for more secure, globally accessible financial tools, especially in emerging markets where traditional banking services may fall short.
Zawya
2 days ago
- Zawya
Google is going ‘all in' on AI. It's part of a troubling trend in big tech
Google recently unveiled the next phase of its artificial intelligence (AI) journey: 'AI mode'. This new feature will soon be released as a new option to users of Google's search engine in the United States, with no timeline yet for the rest of the world. The company says it will be akin to having a conversation with an expert well versed on a wide range of topics. This is just one of many steps Google is taking in pursuit of its 'all-in' approach to AI. The 'all-in' approach extends beyond just integrating the technology into different applications. Google is providing products all along the AI supply chain – a process known as 'vertical integration' – housing everything from AI computer chips through to the user interfaces we interact with on a daily basis, such as Google maps or Gmail. Google isn't the only AI company with ambitions of vertical integration. For example, OpenAI recently acquired a hardware startup co-founded by Apple's Jony Ive, which will centralise hardware development within the company. Amazon is taking similar steps. It owns cloud computing platforms, custom chips, device plans and is incorporating more AI services into products. This may be the beginning of a trend of vertical integration across big tech. And it could have significant implications for users and companies alike. The AI 'tech stack' Hardware, software, data sources, databases and servers are some of the layers that make up what is commonly referred to as the 'AI tech stack'. There are four main layers to Google's evolving vertical tech stack: 1. Hardware layer. Google develops its own AI chips, known as tensor processing units (TPUs). The company claims these chips provide superior performance and efficiency compared to general purpose processors. 2. Infrastructure layer. The company uses its own cloud infrastructure to source its computing power, networking and storage requirements. This infrastructure is the foundation for running and scaling AI capabilities. 3. Model development layer. In-house research capabilities are used to drive the development of their products and services. This includes research around machine learning, robotics, language models and computer vision. 4. Data layer. Data is constantly sourced from users across all Google platforms, including its search engine, maps and email. Data collection is a condition of using any Google application. Some argue vertical integration is an optimal and cost-effective business strategy in many industries, not just tech. However, the realities of this set-up prove otherwise. Fuelling power imbalances Google and OpenAI are two of just a handful of companies which dominate the global technology market. Thanks to this market dominance, these companies can charge higher markups for their goods and services and abuse practices in online advertising. Vertical integration further skews this power imbalance by centralising the layers of the AI tech stack to one company. A distribution of hardware, infrastructure, research and development and data across multiple industries helps support a more equitable playing field across the industry. The loss of this equity creates greater barriers to entry for smaller companies as the larger conglomerates keep everything in-house. It also reduces incentives to innovate in ways that benefit consumers because it eliminates the business competition that usually drives innovation. Data is often described as the new gold. This is especially true in the case of AI, which is heavily reliant on data. Through its many platforms, Google has access to a continuous stream of data. In turn, this gives the company even more power in the industry. The vulnerabilities of vertical integration The success of a company that is vertically integrated relies on housing the best knowledge and expertise in-house. Retaining this level of resourcing within a small handful of companies can lead to knowledge and expertise hoarding. Research shows knowledge and expertise hoarding reduces social learning and increases disparities between 'winners' and 'losers' in a given market. This creates an overall vulnerable industry because net gains are lost in the pursuit of exclusivity. Exclusivity also breeds a lack of resilience. That's because the points of failure are centralised. Risk is better managed with additional oversight, transparency and accountability. Collaborations across industry rely on these processes to work together effectively. Centralising the AI tech stack within one organisation eliminates external scrutiny, because it reduces interactions with external providers of products and services. In turn this can lead to a company behaving in a more risky manner. Regulatory bodies can also provide external scrutiny. However, the current push to deregulate AI is widening the gap between technology development and regulation. It is also allowing for big tech companies to become increasingly opaque. A lack of transparency raises issues about organisational practices; in the context of AI, practices around data are of particular concern. The trend towards vertical integration in the AI sector will further increase this opacity and heighten existing issues around transparency.
