On a train to #Dagstuhl, I finally got to read the nice write-up about on-device local-web-to-app tracking: https://localmess.github.io/assets/bridges-to-self-localmess-usenix-security-26.pdf
TL;DR summary: You might want to uninstall (or deactivate if pre-loaded) all #Facebook and #Yandex apps from your phone. That kind of behavior is pretty clearly malicious - not even just ethically wrong, but seems actually illegal (at least in the EU, though IANAL).
René Mayrhofer :verified: 🇺🇦
npub1sa…e3hha
2026-04-19 10:05:32 UTC
Author Public Key
npub1sarnu5yyxchvqwaxqvhu987xpyeklgnq2gy4dz5200v9qz9gje8ske3hhaSeen on
wss://relay.momostr.pinkPublished at
2026-04-19 10:05:32 UTCEvent JSON
{
"id": "9889ffbea8b63b46b868e6d624a21e634f2f42dcfd8425b720cd2b5f4936c737",
"pubkey": "87473e5084362ec03ba6032fc29fc609336fa2605209568a8a7bd85008a8964f",
"created_at": 1776593132,
"kind": 1,
"tags": [
[
"t",
"yandex"
],
[
"proxy",
"https://infosec.exchange/@rene_mobile/116430807556208612",
"web"
],
[
"t",
"dagstuhl"
],
[
"t",
"facebook"
],
[
"proxy",
"https://infosec.exchange/users/rene_mobile/statuses/116430807556208612",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/rene_mobile/statuses/116430807556208612",
"pink.momostr"
],
[
"-"
]
],
"content": "On a train to #Dagstuhl, I finally got to read the nice write-up about on-device local-web-to-app tracking: https://localmess.github.io/assets/bridges-to-self-localmess-usenix-security-26.pdf\n\nTL;DR summary: You might want to uninstall (or deactivate if pre-loaded) all #Facebook and #Yandex apps from your phone. That kind of behavior is pretty clearly malicious - not even just ethically wrong, but seems actually illegal (at least in the EU, though IANAL).",
"sig": "a27182521b4befd1b82a0184f10527b6cab62fdae0575e0f938f9e526908498e21330b205ac50abbea5826ab43b04329d36b63890834e00e4d166441c3aa8600"
}