Q post 1337:

Facebook is listening to you 24/7/365.

Literally.

The CCC (Chaos Communication Congress) is held annually in germany. This is a

talk "How Facebook tracks you on Android (even if you don’t have a Facebook

account)". The talk lasts 43min and is in english language

Abstract:

In this talk, we’re looking at third party tracking on Android. We’ve captured

and decrypted data in transit between our own devices and Facebook servers. It

turns out that some apps routinely send Facebook information about your device

and usage patterns - the second the app is opened. We’ll walk you through the

technical part of our analysis and end with a call to action: We believe that

both Facebook and developers can do more to avoid oversharing, profiling and

damaging the privacy of their users.

Some key points:

• Apps using the FB SDK send data to FB immediately on start

• FB shifts responsibility to app developers

• Privacy is not enabled by default

• Opting out of personalisation just sets a flag to 'false'

• Resetting google ad ID resets the FB ad ID because they are the same (!)

https ://media.ccc.de/v/35c3-9941-how_facebook_tracks_you_on_android

Download:

https ://cdn.media.ccc.de/congress/2018/h264-hd/35c3-9941-eng-deu-How_Facebook_tracks_you_on_Android_hd.mp4

https ://cdn.media.ccc.de/congress/2018/h264-sd/35c3-9941-eng-deu-How_Facebook_tracks_you_on_Android_sd.mp4

https ://cdn.media.ccc.de/congress/2018/mp3/35c3-9941-eng-How_Facebook_tracks_you_on_Android_mp3.mp3

https ://cdn.media.ccc.de/congress/2018/opus/35c3-9941-eng-How_Facebook_tracks_you_on_Android_opus.opus

https ://cdn.media.ccc.de/congress/2018/slides-h264-hd/35c3-9941-eng-deu-How_Facebook_tracks_you_on_Android_hd-slides.mp4

Other talks:

https://media.ccc.de/c/35c3