Tracking code that Meta and Russia-based Yandex embed into millions of websites is de-anonymizing visitors by abusing legitimate Internet protocols, causing Chrome and other browsers to surreptitiously send unique identifiers to native apps installed on a device, researchers have discovered. Google says it's investigating the abuse, which allows Meta and Yandex to convert ephemeral web identifiers into persistent mobile app user identities.
https://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/
Dan Goodin
npub1z3…8qvzu
2025-06-03 14:19:36 UTC
Author Public Key
npub1z3lwfekw80j4ngzg6ky3ks202xr6uwnd4jttxzsd4euc9l55euvq48qvzuSeen on
wss://relay.momostr.pinkPublished at
2025-06-03 14:19:36 UTCEvent JSON
{
"id": "547c72b273f2691c632a2fa568191b03b80059657b6e865e185688680d4d5e9a",
"pubkey": "147ee4e6ce3be559a048d5891b414f5187ae3a6dac96b30a0dae7982fe94cf18",
"created_at": 1748960376,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@dangoodin/114619867229092354",
"web"
],
[
"proxy",
"https://infosec.exchange/users/dangoodin/statuses/114619867229092354",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/dangoodin/statuses/114619867229092354",
"pink.momostr"
],
[
"-"
]
],
"content": "Tracking code that Meta and Russia-based Yandex embed into millions of websites is de-anonymizing visitors by abusing legitimate Internet protocols, causing Chrome and other browsers to surreptitiously send unique identifiers to native apps installed on a device, researchers have discovered. Google says it's investigating the abuse, which allows Meta and Yandex to convert ephemeral web identifiers into persistent mobile app user identities.\n\nhttps://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/",
"sig": "8e2c1026d1ca9d08c98866f06eff04b4b3b8b4ae9d92e77f2d3edc2228b39aca42541ed431d67273bc5994674b8832bab8faafeadebaa31a3c86dc12c73fd73c"
}