logoalt Hacker News

username135last Tuesday at 2:29 PM1 replyview on HN

Simple question: would disabling apps from running in the background prevent this? Or, more simply, not staying logged into an app on your phone?


Replies

sethauruslast Wednesday at 4:27 AM

Yes, preventing the app from running in the background (entirely) would prevent it from listening on a port and collaborating with websites via this exploit.

As for the second part: no, logging out of the apps would not necessarily be enough. The apps can still link all the different web sessions together for surveillance purposes, whether or not they are also linked to an account within the app. Meta famously maintains "shadow profiles" of data not (yet) associated with a user of the service. Plus, the apps can trivially remember who was last logged in.