Meta and Yandex Secretly Tracked User Web Browsing Data

Meta and Yandex Secretly Tracked User Web Browsing Data

english.elpais.com

Meta and Yandex Secretly Tracked User Web Browsing Data

Researchers discovered Meta and Yandex secretly tracked Android users' web browsing data, even in incognito mode, by exploiting a loophole that linked information from their apps to user web activity; Meta disabled the system after being questioned.

English
Spain
TechnologyCybersecurityGoogleMetaPrivacyAndroidTrackingMozilla
MetaGoogleMozillaYandexImdea NetworksRadboud University
Günes AcarNarseo Vallina-Rodríguez
How did Meta's tracking system bypass browser privacy settings, and what specific data was collected?
Meta, along with Yandex, was secretly tracking user web browsing activity even in incognito mode or when using a VPN, linking information from their apps (Facebook, Instagram) with users' web browsing data. This was achieved through a connection to the user's own device, bypassing browser privacy controls. The practice was stopped after being exposed by researchers.
What were the roles of Google, Mozilla, and other tech companies in addressing this issue, and what steps were taken to mitigate this type of tracking?
The tracking method involved using the Meta Pixel on websites, which when combined with a user's logged-in Meta app on their Android device, allowed the exchange of identifiers and information between the website and app. This deanonymized web traffic, collecting detailed data on user actions beyond simple page visits, including searches, shopping cart activity, and purchases. This circumvented standard tracking methods that rely on user information provided through registration forms.
What are the broader systemic implications of this incident for online privacy, and what types of regulations or technological solutions might prevent similar practices in the future?
This sophisticated tracking technique highlights the ongoing arms race between tech companies and privacy advocates. The use of app-privileges and connections to local ports underscores the potential for misuse of seemingly innocuous features. Future implications include stricter regulations on data collection and increased focus on cross-platform privacy protections.

Cognitive Concepts

3/5

Framing Bias

The framing emphasizes the shocking and secretive nature of Meta's actions, highlighting the surprise and condemnation from researchers. The headline and introduction strongly suggest malicious intent. While this approach is effective in grabbing attention, it might not fully reflect the potential for unintentional consequences or alternative explanations.

3/5

Language Bias

The article uses strong language such as "dubious practice," "invasive techniques," and "malicious online scripts." While these terms reflect the seriousness of the situation, they also introduce a negative tone and could be replaced with more neutral alternatives. For instance, "dubious practice" could be "questionable technique."

2/5

Bias by Omission

The article focuses heavily on Meta and Google's responses and actions, but it could benefit from including perspectives from privacy advocacy groups or independent security experts to offer a more balanced view. The article also doesn't explicitly mention potential legal ramifications beyond stating that the practice is "potentially illegal.

2/5

False Dichotomy

The article presents a clear dichotomy between Meta's actions and the responses from Google and Mozilla, framing it as a battle between tech giants. However, the complexity of privacy regulations and the diverse range of tracking technologies are not fully explored.

Sustainable Development Goals

Reduced Inequality Negative
Direct Relevance

The tracking methods employed by Meta and Yandex disproportionately affect users who may not be aware of or able to protect themselves from such invasive data collection, thus exacerbating existing inequalities in access to privacy and data protection.