@dangoodin

Runtime analysis confirms what privacy researchers have warned about: Meta and TikTok ad pixels harvest product-level commerce data, scrape PII from checkout forms, and can transmit data before consent management platforms activate.

The hashing both platforms use? The FTC ruled in 2024 it does not constitute anonymisation. Deterministic SHA-256 hashes of emails and phone numbers are trivially matched against existing platform databases. The BetterHelp enforcement action proved this isn't theoretical.

The underrated risk: every merchant running these pixels feeds competitive intelligence — pricing, conversion rates, catalogue data — directly into platforms that sell targeting to their rivals.

One claim to treat with caution: Jscrambler reports Meta's automatic events feature captured partial payment card details (last four digits, expiry, cardholder name) from checkout pages. The mechanism is plausible — the feature scans visible DOM elements by default — but this specific finding hasn't been independently reproduced yet.

Source: Jscrambler Security Research Team, cross-verified against Meta's own documentation, FTC enforcement actions (BetterHelp, Nomi), and independent CMP vendor warnings.

https://jscrambler.com/blog/beyond-analytics-tiktok-meta-ad-pixels

#gprs #privacy #infosec

@tasket @n_dimension @dangoodin

Let's ask this the other way around. Waterfox with Ghostery and PrivacyBadger running should give them very little to work with, correct? Or am I fooling myself?
(mind you, I use neither AI-Meta-Book nor Tiktok, but of course that doesn't mean that I'm not exposed to their scripts on any non-Mastodon page that I visit...)

@tasket
Well that was easy... added uBlock Origin.
There appears to be some overlap between it and ghostery, but ghostery claims that especially for ad-blocking they cover more...

I don't think having both will hurt me (except likely burning more CPU cycles.

Thanks

@dirkhh @tasket

privacy badger is worth a look

@joriki @tasket

Privacy Badger is awesome. And certainly from a highly reputable source.

@dirkhh @tasket

decentraleyes is another complementary addon