90
This post knows where you're viewing it from (Lemmy doesn't proxy external images) [ARCHIVED]
(lemmy.ml)
Note: This post now archived and as such no longer works
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 11 Aug 2023
90 points (88.8% liked)
Lemmy
12443 readers
91 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.
founded 4 years ago
MODERATORS
Can countermeasures be implemented in the clients to mitigate privacy risks, while not having to proxy images?
no. the remote server will log the requests based on the client address. it is a good argument for using a vpn.
Oh I mean, sure, but I don't think IP logging is the main privacy concern with spy pixels.
I'm assuming this trick uses the user agent string and other request metadata to identify clients. Even if it didn't recognize Jerboa as a client, it did guess that I was on mobile. That's not possible just by tracking IPs, unless they're cross-referencing it with other datasets. Also, I was on VPN anyway, so the IP would have been useless.
It should be possible for clients to obfuscate/fake the metadata of image requests to make tracking with spy pixels less effective.
Yup, I'm parsing the user agent with the
user_agentsPython library.