Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Instagram on Android was caught bypassing OS security requirements by opening a port on localhost, which webpages with Facebook tracking scripts would connect to to get your identity.


The modified version I use disables all telemetry. I'm also doubtful my Pihole wouldn't just black it anyways. And ultimately, I use Firefox on Android with Ublock and strict tracking protection, so it doesn't seem I would be susceptible to this particular cookie interception Meta relies.

That said, I see your point. I wouldn't use Instagram if I couldn't do these things. If Google cracks down on user choice to a degree that even adb can't work around, then I'm out. Motorola's Graphene OS phone can't come soon enough.


Link to this? Haven't heard of it.



IIRC it's related to this stuff reported on by fern: https://www.youtube.com/watch?v=SOQynHuWPeI




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: