Needless to say, this works on any Browser and any app that runs JavaScript and can display webviews inside of it, including some Nostr apps. Issues like this are why Amethyst doesn't display Twitter preview cards and play YouTube videos: they all need JavaScript.
Vitor Pamplona's avatar Vitor Pamplona
How do Facebook and Instagram apps track what you do in the browser, even in incognito mode? Meta apps start a local server on the phone and keep it running in the background. The Meta analytics script, running on most websites, pings any "localhost" server with the anonymized tracker ID for that session. The app then associates the browser ID with your Meta account, and voilร , all your browsing history is now linked to your Facebook account. Android is designed to block such things, but Meta found a workaround using basic Sockets and transmitting the tracker ID in the initial handshake of a WebRTC (voice call) request. It's genius and evil as fuck. https://www.zeropartydata.es/p/localhost-tracking-explained-it-could
View quoted note →

Replies (8)

One of the reason I like Peergos, they went to an extreme length to sandbox all their apps. Not practical for all apps, but for things that only need to read and write from and to your data store, it works, and it protects your data from all forms of "phone home". View quoted note โ†’
Vitor Pamplona's avatar Vitor Pamplona
Needless to say, this works on any Browser and any app that runs JavaScript and can display webviews inside of it, including some Nostr apps. Issues like this are why Amethyst doesn't display Twitter preview cards and play YouTube videos: they all need JavaScript. View quoted note โ†’
View quoted note →
And very unfortunately people have those malicious applications preinstalled on their devices with system permissions, unable to uninstall them. Vendors subsidies device cost this way which is abhorrent. I'm sure people would prefer to pay extra and NOT have that garbage installed on their devices.
This is correct even if you use shizuku+canta to remove those system apps because you can't root your device their preinstall check apps are in /priv/* which reinstall them after it recognizes they have been uninstalled.
And it is true that "not all apps", because: "As with any other app, it can't access data of other apps" But, I just learned this a few days ago: What else would you correct?
Vitor Pamplona's avatar Vitor Pamplona
Needless to say, this works on any Browser and any app that runs JavaScript and can display webviews inside of it, including some Nostr apps. Issues like this are why Amethyst doesn't display Twitter preview cards and play YouTube videos: they all need JavaScript. View quoted note โ†’
View quoted note →
โ†‘