@aral Please find me a technology big tech is involved with that we are not funding actual alternatives to. Any form of proprietary lock-in is something we target to remove, anything that invades privacy needs to be stopped/mitigated (think #NoScript, #JShelter, #Offen.dev, #Goatcounter, #TrackingTheTrackers, #Searx, #Qubes, #SpectrumOS, etc). That is our contribution. Obviously, the trillion dollar surveillance economy needs to be curbed by harsh regulation, but this is not within our remit...
We've identified two new, easy data points for #TrackingTheTrackers, and are already applying them to @fdroidorg They can be added to @exodus Looking forward to seeing what others do with this! https://guardianproject.info/2020/12/15/new-data-sources-api-key-identifiers-and-broadcastreceiver-declarations/
New Data Sources: API Key Identifiers and BroadcastReceiver Declarations

A central focus of the Tracking the Trackers project has been to find simple ways to detect whether a given Android APK app file contains code which tracks the user. The ideal scenario is a simple program that can scan the APK and tell a non-technical user whether it contains trackers, but as decades of experience with anti-virus and malware scanners have clearly demonstrated, scanners will always contain a large degree of approximation and guesswork.

εxodus ETIP: The Canonical Database for Tracking Trackers

There is a new story to add to the list of horrors of Surveillance Capitalism: the United States’ Military is purchasing tracking and location data from companies that track many millions of people. We believe the best solution starts with making people aware of the problem, with tools like Exodus Privacy. Then they must have real options for stepping out of “big tech”, where tracking dominates. F-Droid provides Android apps that are reviewed for tracking and other “anti-features”, and F-Droid is built into mobile platforms like CalyxOS that are free of proprietary, big tech software.

#tracking users and usage is an essential element of data analytics, so what exactly is tracking? Here is our first attempt at an overarching definition:
https://guardianproject.info/2020/05/20/on-the-classification-of-tracking/ #TrackingTheTrackers #CleanInsights
On the classification of tracking

This position paper tries to outline a framework for defining trackers in smart phones and lists mechanisms for identifying them. It hopes to serve as the foundation for the work done in the Tracking-the-Trackers project. In section 1 we start with an abstract analysis of levels of unwanted behaviour in the context of tracking. Next, in section 2, we focus on an attacker’s perspective, on anonymity and pseudonymity. This foundation allows us to define terms which are needed throughout the paper.

#Caveat: it only shows « disguised » third party #trackers.

Eg: on madmoizelle.com:
- #DuckDuckGo browser app alerts me of 12 trackers 😬 (#Google, #Facebook, #Amazon, #Criteo, etc)
- #TrackingTheTrackers only says: « good news, zero disguised third party trackers » 🙃



#OnlinePrivacy #Advertising #Ads #PrivacyGradeRating #DuckDuckGoBrowser #Analytics
madmoiZelle.com

madmoiZelle.com est un magazine féminin qui se la raconte pas. On y parle mode et beauté, mais aussi gros burgers, sujets de société, sexe, études, politique et pop-culture. Eh ouais.

#TrackingTheTrackers I'm digging into tools these days, #faup provides lookups if a string is a known domain name, and #ipgrep returns all strings that resolve to an IP address. The #ipgrep approach seems much more useful since it doesn't need a pre-prepared list of "known domain names", instead #DNS provides that

https://github.com/stricaud/faup
https://github.com/jedisct1/ipgrep

GitHub - stricaud/faup: Fast URL decoder library

Fast URL decoder library. Contribute to stricaud/faup development by creating an account on GitHub.

GitHub
anyone ever seen a #maven API that lets you query by SHA256? Like start with the hash of a JAR, then see which repos it is on? #TrackingTheTrackers