Skip to main content
CPEBuddy
Naughty Meta Was Tracking Users

Naughty Meta Was Tracking Users

Source: YouTube · The PrimeTime · published Jun 19, 2025 · 35:04

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

Meta's "local host tracking" system bypassed Android security to link users' web browsing to their Facebook/Instagram accounts, potentially resulting in 32 billion euros in EU fines 0:04.

Key Takeaways:
• Meta's system allowed tracking even when users used VPNs, incognito mode, or deleted cookies 0:34
• Meta apps created background services that listened on ports and received data from browsers via WebRTC and STP protocols 4:56
• Meta could face simultaneous fines under GDPR, DSA, and DMA regulations totaling 32 billion euros 2:02
• Yandex was also using similar tracking methods since 2017 19:12
• Meta removed the tracking code after researchers exposed the vulnerability in June 9:23

This tracking method highlights significant privacy concerns in how tech companies collect user data across platforms.

Sources:

  • 0:04 Introduction to local host tracking and potential fines
  • 0:34 Explanation of how tracking bypassed privacy protections
  • 4:56 Technical details of the tracking process
  • 2:02 Potential EU regulatory fines
  • 19:12 Yandex's involvement
  • 9:23 Meta's removal of tracking after discovery

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

I hope everybody's ready. We got stuff to do today. Look at this. Local host tracking explained it could cost Meta $32 billion. Watch this pre-eread. Even before looking GDPR, that's I'm going to pre I'm calling it now. GDPR. Let's go. Uh, local health tracking explains it could cost Meta $32 billion. You just can't finish off Zuckerberg. That's a hell of a subtitle. You know, I I've I've I've heard of many different subtitles in my lifetime, but that by far is the strangest subtitle I've heard. Dude, bro, there's no happy endings for Zuckerberg. Uh, okay. What happened? Meta devised an ingenious system local host tracking that bypasses Android sandbox protections to identify you while browsing on your mobile phone, even if you use a VPN. The browser's incognito mode and refuse and refused…