3 ms·

If your ISP really wants to provide customer/household level tracking to advertisers/partners, they could easily provide an API to them like getCustomerId(IPAdd

by nly 11y ago

If your ISP really wants to provide customer/household level tracking to advertisers/partners, they could easily provide an API to them like getCustomerId(IPAddress, Timestamp). It's not entirely clear from the article whether it's "Set-Cookie" being injected in to replies, or the "Cookie" header in to requests, or both. Interesting times nonetheless.

yclept 11y ago
It is an http header: X-UIDH added to http requests
- andymurd 11y ago
  It occurs to me that a mischievous person could easily write a Firefox plugin to (over)write that header with random garbage. If enough people used the plugin, it would render Verizon's data useless.
  - clort 11y ago
    except that the ISP is adding this header. They could (or do already?) just replace your header with their own..
    - yclept 11y ago
      Yep, and Verizon does. They will overwrite your header.