Skip to main content


Apparently, if you have facebook or Instagram installed on your phone, #Meta was able to track your browsing habits and link them to your real identity even if you never logged in on the web, used incognito mode or a VPN. I hope Meta gets hit with every fine in the book.

zeropartydata.es/p/localhost-t…

#meta
in reply to Eugen Rochko

As usual, the fine, if happening, will be a small fraction of their annual revenue. So, it'll be more a tax for doing business than exactly a fine.
This entry was edited (5 months ago)
in reply to Eugen Rochko

Mark Suckerberg's #meta is as #evil as #bigtech goes - one needs look no further than at what IG does to kids - so this is no surprise. On hindsight, good decision not to use neither f*book nor IG.
#breakupBigtech
This entry was edited (5 months ago)
in reply to Eugen Rochko

“You’re not affected if (and only if)

• You access Facebook and Instagram via the web, without having the apps installed on your phone
• You browse on desktop computers or use iOS (iPhones)
• You always used the Brave browser or the DuckDuckGo search engine on mobile”

in reply to Aulia Masna

@aulia That 3rd bullet point is a mystery. This thing is not browser or search-engine dependent
in reply to Eugen Rochko

@haayman @aulia still not relevant, even MS Edge has nowadays tracking blockers built-in. All browsers except Chrome.
in reply to Eugen Rochko

@haayman @aulia maybe they mean the app tracking protection feature from DuckDuckGo, which doesn't have to do anything with browsing. It sounds like that would protect against this.
in reply to Eugen Rochko

"You’re not affected if (and only if)

You access Facebook and Instagram via the web, without having the apps installed on your phone

You browse on desktop computers or use iOS (iPhones)

You always used the Brave browser or the DuckDuckGo search engine on mobile

"

This is not what "if (and only if)" means.

in reply to Eugen Rochko

this is so creepy!

it's like those "i know what you did" crypto scan emails but for real

in reply to Eugen Rochko

haven't allowed it on my phone in years and it is fully banished to Duckduckgo on the computer
in reply to Eugen Rochko

lately id noticed that ive been getting ads for shit on Instagram for stuff ive been internet searching on my tablet. been wondering why this is, since i use cookie blocking browser extensions.

now i know why — my tablet is the only place i have the Instagram app.

not making that mistake again

in reply to Eugen Rochko

and you just know they were telling their investors “oh yeah youre getting good results from it our ads because our AI is SOOO GOOOOD”

nope. just literal wiretapping

in reply to Eugen Rochko

That's why i don't install social media apps. Most things can be run in a browser, Mastodon for example. There's no need for more bloat in smartphones.
in reply to Eugen Rochko

We noticed something very odd a couple of years ago with WhatsApp web and triggered us to switch away from the app. In case others notice or can replicate it, the WhatsApp session had expired in a tab. If you were browsing in other tabs, you started seeing WhatsApp console errors as if they had taken over the whole browser and continue to try to connect.
in reply to Eugen Rochko

And they consumed your phone's text messages... until Facebook was caught red-handed when doing a profile dump from Facebook revealed people's personal text messages mixed into the archive.
in reply to Eugen Rochko

in this case, the fine is selling your data for money.
In my opinion, we need to fight against such spies, not fines
This entry was edited (5 months ago)
in reply to Eugen Rochko

@ai6yr I figured they were doing something like this, since so many phones come with Facebook permanantly installed
in reply to Eugen Rochko

the moment Facebook begun raking in billions from advertisers for targeted surveillance of their idiot, consumerist "product", we entered the Twilight Zone.

Or maybe that happened when corrupt politicians the world over saw what happened and said: "hey there, Zuck, nice biznis you came up with, too bad if we were to regulate it".

Whatever the precise moment we got trapped, we will not exit the Twilight Zone unless Meta goes bankrupt. It is so simple and stark.

#surveillancecapitalism

in reply to Eugen Rochko

@Gargron@mastodon.socia

I think it was brazil who blocked Twitter/X as a punishment and to force them to toe the line, fines won't stop META at all, but what would stop them is to block them fully until they get their act together and comply with our laws end of story. It did seem to work.

Time for TOUGH action rater then pussyfooting around.

Oh and raise awareness of what Meta are doing in the context of various laws and suggest people make their own minds up if they should stay on META products.

in reply to Eugen Rochko

I would assume that using a privacy-oriented extension such as uBlock Origin or noScript would also prevent this breach, but the article doesn't mention it. Isn't that the case?
in reply to Eugen Rochko

a more technical explanation is available there: localmess.github.io/

With more Facebook shenanigans when the researchers disclosed the information.

Yandex applications are also using the same trick.

in reply to Eugen Rochko

I remember when they used to play silent audio in their native app to receive more background processing time. Since then, I refuse to run any of their native apps. Phone apps should not be able to open localhost ports without user consent. This is outrageous.
in reply to Eugen Rochko

so glad I deleted my accounts over there earlier this year …
in reply to Eugen Rochko

this is especially insidious considering that on some phones (I think samsungs are some of them) you cannot fully uninstall facebook, only "disable" it
in reply to Eugen Rochko

I installed Facebook messenger on my phone while I was looking for a local apartment to rent. It's still there. The thing is, I've tried to uninstall it several times but nothing happens. Only getting the errors that the app has stopped working
in reply to Eugen Rochko

however many fines they get they won't care. They should be forced to pay compensation to all their users. Then people might actually take notice of what big tech are doing.
in reply to Eugen Rochko

1-3
@Gargron thank you for sharing this article.

So to sum this up, you won’t be affected by these ‘data breaches’ if:
1. You access FB and IG via the web, and not have the apps installed on your phone [this article is concerned with Android users].
2. You’re browsing on a computer, or using an iPhone/browsing with iOS (iPhone).
3. You’re using ‘Brave browser’ [which was unaffected in the test overview], or the ‘DuckDuckGo’ browser [which was minimally affected], on your phone. [see 2-3]

This entry was edited (5 months ago)
in reply to Eugen Rochko

I can't explain with words how much I hate this company. I wish that one day it's userbase gets so fed up that they all leave and Meta goes bankrupt. Good job from the EU for going up against this giant with fines. They do not care about their users.
This entry was edited (5 months ago)
in reply to Eugen Rochko

It would be a bonus if Android now dropped Zuckerberg- but of course they've been getting paid for hosting Fb & Insta too, like Apple.

FB were always fearful of & vulnerable to Android & Apple wims.

in reply to Eugen Rochko

I’m glad I became Meta-free last year. It was a liberating experience.
in reply to Eugen Rochko

Fines won't cut it. What’s needed is a ban on their business operations in the EU.

Meta did this knowingly — fully aware of the law, the fines, and the technical barriers Android puts in place. They pushed through anyway, showing the kind of calculated disregard for rules that’s hard to see as anything but criminal.

They likely weighed the fines against the profits and went ahead. And they’ll do it again, just in a slightly different way.

This is not a company that learns or changes. They don’t respect the law, they don’t care about market rules — they care about control and profit, and they’ll keep pushing until they’re stopped.

So let's stop them.

This entry was edited (5 months ago)
in reply to Eugen Rochko

Problem with fines is: They will most likely be dealt with by institutions from european tax haven countries. And even when they finally pay it, it doesn't solve the problem. As long as it's more profitable to just carry on with the next shit, they'll change nothing.
in reply to Eugen Rochko

"You're not affected if you always used the DuckDuckGo search engine on mobile"

How would using DuckDuckGo have prevented this? Seems like the issue is happening on any site you end up on, regardless of your search engine of choice.

in reply to Eugen Rochko

I think the term we are looking for is "Malware".

The software was explicitly designed to circumvent security mechanisms of the OS in order to implement undesired extra functionality.

in reply to Eugen Rochko

of course it does.
I used to not have any fb app installed on my phone, and rarely used it on browser.
Once I did installed messenger, it collected everything it could, and almost instantly recommended bunch of fb profiles of mine discord friends it didn't knew about before.

fuck meta

in reply to Eugen Rochko

I hope it too, but honestly: those companies will never face consequences. They never have. It would have been better to force them to play by the rules much, much earlier but politics was wild with "deregulation", "growth", "the economy". Now the tech bros do whatever they want.
in reply to Eugen Rochko

I received two US class action lawsuit emails about this earlier this week. They were for two different companies where the Meta Pixel was used.
in reply to Eugen Rochko

What I don't understand about this is why the browser allows a random web page to send UDP packages anywhere but to the origin.
in reply to Eugen Rochko

This is why I never have a social media app on my phone and sim swapping is why I never have a financial app on my phone.

BTW, Google could be open to an even larger lawsuit.
wired.com/story/a-researcher-f…

in reply to Eugen Rochko

Most lovely is who is doing this - Facebook and Yandex. Yes Russkies doing it together with Meta. What are the chances? ❤
in reply to Eugen Rochko

I agree! Does this also mean, your servers will stop federating with theirs? 😉​
in reply to Eugen Rochko

I wonder if this affects WhatsApp too as metadata is not encrypted 🤔
in reply to Eugen Rochko

so where is all this cash going? To the users who have been spyed. Right?

Is just me or this is actually bribing authorities?

in reply to Eugen Rochko

Guess what. I can't uninstall it on my phone. I can only quote disable it.

sensorstechforum.com/unable-un…

And I never installed it so I didn't even know it was there.

in reply to Eugen Rochko

we get mad at Zuck for this, but we let the developers who built/designed/tested these systems off without any consequences. FB “engineers”, current or former, are shitty humans
in reply to Eugen Rochko

Do you still think being members in the same social media foundation is a good thing?
in reply to Eugen Rochko

This only means that others are also doing it. So everyone should be very careful with what apps they install.

Sure, I'd say this is a android only exploit for now. I'd be curious if this exploit can be done on GrapheneOS, instead of Google Android.

But if I was running iOS I wouldn't gloat too much. Apple has been sharing still unencrypted push notifications to governments for quite a while.

Pick your poison.

in reply to Eugen Rochko

deleted my meta accounts a while back and all of the apps as well.
in reply to Eugen Rochko

Only on Android, of course. Because it is so much more open, unfortunately also to this kind of misuse.
in reply to Eugen Rochko

has anyone checked if the facebook mobile SDK's you can integrate into apps also use the same technique?
in reply to Eugen Rochko

Just wow. I feel for everyone who has the Facebook app and I hope Meta is fined heavily over this.
in reply to Eugen Rochko

Thanks for the push. I got my final family member off Messenger weeks ago, and I needed a push to delete the accounts.
Facebook account deleted
Messenger account deleted
Bonus action, Instagram account deleted.

😇

in reply to Eugen Rochko

and if you use #threads_meta_corruption ?

It is same as insta ?!?

Who is still federating with corrupted threads ?

in reply to Eugen Rochko

If WhatsApp is also owned by meta, is it possibke they are spying on so called private messages on whatsAp too, can they be trusted Not to do this (based on their record NO) it could be interesting as they advertise that can't see messages.

I also hope they get a class action lawsuit along side the fine.

in reply to Eugen Rochko

I'll add that VPNs are snake oil for almost all threat models anyway, especially when it comes to privacy

Lo, thar be cookies on this site to keep track of your login. By clicking 'okay', you are CONSENTING to this.