3 ms·

It seems like this issue can be largely circumvented by the fact that at least on iOS, giving location data now requires much more interaction from the user? Ev

by hnarn 6y ago

It seems like this issue can be largely circumvented by the fact that at least on iOS, giving location data now requires much more interaction from the user? Every time a new app asks for your location, you can select whether you want to give it that information all the time, or only while using the app. Another thing that I've started using recently is NextDNS[1], and it's amazing the amount of tracker garbage that's leaking out, and being blocked on a DNS level, out of almost any mobile application. [1]: https://nextdns.io/ https://nextdns.io/

Terretta 6y ago
I'm sure someone has a database of frameworks that iOS apps turn to for user linking / monetization? I didn't readily find a list last time I looked, so I'm not sure how single person dev shops are getting hooked up with these privacy bypassing hydras. From DNS logs in Nov 2019, I had found some of the more common on iOS a year ago included: iOS “User Linking” Trackers [business].app.link [business].onelink.me [hash].ulink.adjust.com [business].bttn.io bnc.lt branch.io Some of these you can see who uses them, thanks to subdomains: https://securitytrails.com/list/apex_domain/app.link https://securitytrails.com/list/apex_domain/app.link (2962) https://securitytrails.com/list/apex_domain/onelink.me https://securitytrails.com/list/apex_domain/onelink.me (998) https://securitytrails.com/list/apex_domain/bttn.io https://securitytrails.com/list/apex_domain/bttn.io (60) These are different from iOS Measurement Trackers such as: events.appsflyer.com reports.crashlytics.com api.mixpanel.com app-measurement.com But it's gotten enough worse I almost want Apple to implement Little Snitch style blocking at the network layer, and offer a measurement anonymizing API that devs can use and is whitelisted by default. Ensure legit usage/debugging info is anonymously available, while use of other trackers would then suggest other motivations at play.
ac29 6y ago
> Every time a new app asks for your location, you can select whether you want to give it that information all the time, or only while using the app. This is exactly how it works on Android as well (since version 10, IIRC).

by hnarn 6y ago

Terretta 6y ago

I'm sure someone has a database of frameworks that iOS apps turn to for user linking / monetization? I didn't readily find a list last time I looked, so I'm not sure how single person dev shops are getting hooked up with these privacy bypassing hydras. From DNS logs in Nov 2019, I had found some of the more common on iOS a year ago included: iOS “User Linking” Trackers [business].app.link [business].onelink.me [hash].ulink.adjust.com [business].bttn.io bnc.lt branch.io Some of these you can see who uses them, thanks to subdomains: https://securitytrails.com/list/apex_domain/app.link https://securitytrails.com/list/apex_domain/app.link (2962) https://securitytrails.com/list/apex_domain/onelink.me https://securitytrails.com/list/apex_domain/onelink.me (998) https://securitytrails.com/list/apex_domain/bttn.io https://securitytrails.com/list/apex_domain/bttn.io (60) These are different from iOS Measurement Trackers such as: events.appsflyer.com reports.crashlytics.com api.mixpanel.com app-measurement.com But it's gotten enough worse I almost want Apple to implement Little Snitch style blocking at the network layer, and offer a measurement anonymizing API that devs can use and is whitelisted by default. Ensure legit usage/debugging info is anonymously available, while use of other trackers would then suggest other motivations at play.

ac29 6y ago

> Every time a new app asks for your location, you can select whether you want to give it that information all the time, or only while using the app. This is exactly how it works on Android as well (since version 10, IIRC).