Tracking code that Meta and Russia-based Yandex embed into millions of websites is de-anonymizing visitors by abusing legitimate Internet protocols, causing Chrome and other browsers to surreptitiously send unique identifiers to native apps installed on a device, researchers have discovered. Google says it's investigating the abuse, which allows Meta and Yandex to convert ephemeral web identifiers into persistent mobile app user identities.

https://arstechnica.com/security/2025/06/meta-and-yandex-are-de-anonymizing-android-users-web-browsing-identifiers/

Meta and Yandex are de-anonymizing Android users’ web browsing identifiers

Abuse allows Meta and Yandex to attach persistent identifiers to detailed browsing histories.

Ars Technica

@dangoodin Thanks for reporting on this, as always, Dan.

I'm curious on @mysk 's take here, as well as @GrapheneOS

@neurovagrant @dangoodin @GrapheneOS

Our take on this will hopefully launch next week. We're on track. ✌️

@mysk @dangoodin @GrapheneOS Heck yeah, Mysk ;)

that's what I like to hear!

@neurovagrant @dangoodin @GrapheneOS
We took wild path to eliminate tracking. Very curious how the public will receive what we are launching. The feedback of the beta testers was incredibly positive.

@mysk @dangoodin @GrapheneOS Yep, I was one of the beta testers. (I don't think I have any other connection to Mysk than that, so I promise I'm not shilling)

;)