Slashdot Mirror


Verizon Subscribers Can Now Opt Out of "Supercookies"

itwbennett writes Verizon said in January that it would allow subscribers to opt out of having a unique identifier placed on their phones that critics have labelled a "supercookie" because it's almost impossible to remove, but it didn't say when. On Tuesday, Verizon said the identifier won't be inserted for customers who opt out of its mobile advertising program: "Verizon Wireless has updated its systems so that we will stop inserting the UIDH after a customer opts out of the relevant mobile advertising program or activates a line that is ineligible for the advertising program, such as as a government or business line," Verizon said in a change to its policies.

43 of 82 comments (clear)

  1. I don't get it? by awilden · · Score: 2

    So what's the movie reference? It's obviously a joke story...

    1. Re:I don't get it? by IMarvinTPA · · Score: 1

      I think it is a book, 1984. But I don't remember this part...

      Hmm

  2. April Fools??? by davidwr · · Score: 1

    Okay this is last month's news and not a joke, but anything that reads like "BigName Telco Admits They Were Evil" has me waiting for someone to say "April Fools".

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:April Fools??? by Dutch+Gun · · Score: 1

      No, BigName Company was caught with their hand in the proverbial cookie jar, and the backlash was strong enough that they were forced to backtrack a bit. You could just substitute "Lenovo" and "Superfish" with "Verizon" and "supercookie", and the story would essentially be identical.

      Don't discount the importance these headlines, though. The very fact that it *makes* news is a good thing, as it's the only thing that typically forces these companies to back down.

      --
      Irony: Agile development has too much intertia to be abandoned now.
    2. Re:April Fools??? by Anonymous Coward · · Score: 1

      Proverbial?

      This was a very literal cookie jar

    3. Re:April Fools??? by AK+Marc · · Score: 1

      It wasn't a proverbial cookie jar. It was a literal cookie, thus a literal cookie jar.

    4. Re:April Fools??? by whh3 · · Score: 1

      I see what you did there.

      It would have only been better had this somehow been related to a Java implementation. Then they could have had their hand in the Cookie.jar.

      --
      remove nospam. to email!
  3. testing method? by dltaylor · · Score: 4, Interesting

    I can set up a WiFi port to capture the data over that medium (really nice switches that allow port mirroring), but how can I test that 3/4G data requests not only no longer have the "supercookie", but have no new flavor of tracking tag? I'm concerned that they might have one that gets stripped except for special destinations, such as paying businesses, so I couldn't test it against my own web server.

    1. Re:testing method? by johnmoe · · Score: 3, Informative

      You just go to any of the web pages that will show you your http headers. Opt out. Notice that x-uidh header is now gone.

    2. Re:testing method? by viperidaenz · · Score: 2

      The tracking is not done on the phone.

      They inject HTTP tracking headers as the data goes over their 3G/4G network.

      Even if you had a Stingray you couldn't check. You just have to trust Verizon.

    3. Re:testing method? by Anonymous Coward · · Score: 1

      You could set up a web server somewhere and check the headers of incoming requests. This is in fact not that hard if you're familiar with capturing data from WiFi etc. When you e.g. request a web page, the web server sees the incoming page request and gets the headers of that request. The headers include thing like what page you are requesting.

      There are many headers and Verizon is adding one non-standard header among them. There are several existing services that show you the headers you are passing the server, but where's the fun in doing it that easy? :-)

      Here's one anyway:

      http://lessonslearned.org/sniff

    4. Re:testing method? by Neil+Boekend · · Score: 1

      Build a personal stingray. Connect through that.

      --
      Well, I might have a way, but it only works on a semi spherical planet in a vacuum.
    5. Re:testing method? by crtreece · · Score: 1

      Not a verizon customer, but there is an easy solution to this, VPN. They get no idea where your data requests are going or what they are, and they don't get to violate your privacy or the copyright of the site with their Man-In-The-Middle attack.

      --
      file: .signature not found
    6. Re:testing method? by Impy+the+Impiuos+Imp · · Score: 1

      I always assumed there were people who did this for Windows. to search for spy data streams of one type or another. Is there?

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
    7. Re:testing method? by crtreece · · Score: 1

      You do not have right to privacy.

      Says Anon, LOL.

      --
      file: .signature not found
  4. Re:We need COMMUNISM now! by epyT-R · · Score: 2

    Nope. It's 'crony capitalism', where large corps grow the size of the state with lobbies and use it to corner the market and impose the ethics of the principals on the rest of us. It's a revolving door at the top of the pyramid, and they're all friends. A corp can only refuse to employ you or refuse to sell to you, the state can confiscate your property and imprison.. It's both tracks together that create tyranny.

  5. Super! by turkeydance · · Score: 1

    Cookie Monster gets all Cookies now.

    1. Re:Super! by Runaway1956 · · Score: 1

      I wonder if the Matrix would have ended differently if Neo hadn't eaten the cookie? What was IN the cookie?

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
    2. Re:Super! by Runaway1956 · · Score: 1

      "well endowed black gentlemen"

      Your insecurity is showing.

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  6. Confirmed! by crow · · Score: 5, Informative

    http://www.amibeingtracked.com...

    I just checked this. My phone is on a corporate account, so it shouldn't be eligible for the advertising program they're talking about in the first place. The cookie is gone.

    I still hope they get sued out of business over this. Of course, they'll probably settle for something in the low millions that won't impact their profits.

    1. Re:Confirmed! by SeaFox · · Score: 1

      >I still hope they get sued out of business over this. Of course, they'll probably settle for something in the low millions that won't impact their profits.

      That will never happen. Verizon is on the "too big to fail" list, besides being a major telecommunications company (and therefore a part of the National Defense).
      Even if they were actually found guilty/lost/whatever any penalty would be adjusted to make sure it doesn't really threaten their prof^H^H^H^ stability.

    2. Re:Confirmed! by bill_mcgonigle · · Score: 1

      Do we know if amibeingtracked.com is reliable? I checked mine (on a Verizon MVNO) and it says I'm not being tracked (did not opt out).

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    3. Re:Confirmed! by rworne · · Score: 2

      They have an opt-in program. It's called "Verizon Selects".

      Basically, it's a points-based award program that "rewards" you for letting them monitor your location, app usage, and web browsing activity on your phone.

      But why is this opt-in and the super cookie business opt-out?

      Simple. In the selects program, they "pay" you with gift cards or merchandise. With the super cookie, Verizon gets your browsing for free.

      --
      I tried every decent and legal way I could think of to resolve the issue w/the business before I rented the chicken suit
  7. Re:You are a moron! by Runaway1956 · · Score: 2

    *sigh*

    Capitalism isn't a bad thing. Communism isn't a bad thing either. Nor is democracy. However, any form of government can be corrupted by bad men. Especially if the masses of poor clueless chumps sit around just watching. And, that is pretty much what happens with all forms of government.

    I'm not in love with the concept of capitalism, but I do get tired of listening to poor clueless chumps blathering on about how evil it is.

    In effect, you prefer to be manipulated by a communist leader, than by capitalist leaders. Maybe you would prefer not to be used and abused by any corrupt leaders. But - the latter choice really isn't an option, now is it?

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  8. Opting out of Verizon is easier by ZipK · · Score: 1

    FU Verizon and your GD opt-out program.

  9. MVNO's are already opted-out by freeze128 · · Score: 1

    My mobile carrier is an MVNO that uses Verizon's network. I just went to the www.amibeingtracked.com website and it said that I am not being tracked. I had always wanted to know this, and it's good news for all the other users of Page Plus Cellular.

  10. already opted out. by Gravis+Zero · · Score: 5, Insightful

    i opted out by leaving their entire network. fuck them and their unquenchable greed.

    --
    Anons need not reply. Questions end with a question mark.
    1. Re:already opted out. by asimons04 · · Score: 1

      As did I. Even took my Verizon Droid Maxx with me to Net10. Ported my number, too. Best thing I ever did.

  11. Re:We need COMMUNISM now! by johnsnails · · Score: 1

    But whats this got to do with Verizon?

  12. Re:You are a moron! by 7-Vodka · · Score: 2

    How about we pick freedom and give up being ruled over.

    --

    Liberty.

  13. Should be opt-in by DrXym · · Score: 1
    Opt-out is a pathetic concession. Most people don't even know they're being tracked and of those only a small fraction would bother to opt out. I would not be surprised that even with the option 99% of people are still tracked. It's probably why Verizon did it - a sop to those complaining without materially affecting their bottom line.

    This is the sort of thing that should be covered by privacy law. This would be the case in Europe where data protection laws would require explicit consent and services would have to be opt-in, not opt-out.

  14. Re:We need COMMUNISM now! by _merlin · · Score: 2

    Nope. It's 'crony capitalism'

    Call me cynical, but I don't think I've ever seen any other kind of capitalism.

  15. CORRECTION! by ramriot · · Score: 2

    Before we get too far down the rabbit home here, I would like to add a correction to the story above.

    The Verizon 'SuperCookie' is not "placed on their phones" it is an additional header line 'X-UIDH' inserted in outgoing internet requests by their network management system see: http://en.wikipedia.org/wiki/V.... As such it is never present on the users device, but does uniquely identify a user to any server they communicate with if that server either has back end pair access to verizon's customer database or they use services that combine multiple trackers with this one to keep lock on the users sessions relative to the entire history, but not associated with a Verizon customer record.

    One good thing (if anything about this can be called good) is that they cannot add this header to TLS/SSL traffic as the headers are end-to-end encrypted, so provided yo stay HTTPS on your connections or run a mobile VPN it does not matter if you opt out or not as they cannot add this tracker to your traffic.

    One final thought is that even without encryption if there was a proxy server out on the internet that you set your mobile device to sent all traffic through and that server was to strip out this header from your requests before passing it on to its destination then you would also be protected, which I will be setting up should this 'service' emerge from the slime in the future.

  16. Re:We need COMMUNISM now! by GLMDesigns · · Score: 1

    So this cannot happen in communist or fascist or theocratic states. Right?

    What makes capitalism unique and useful to the individual is that one can push back against a corporation by not buying their products. This cannot happen when the state does it. At that point it requires guns.

    Capitalism gives an option of wallets that you can take advantage of before you go to guns.

    From my perspective you're the brainwashed, monkey kissing idiot.

    --
    If you're scared of your govt then you need to further restrict its powers
    Vote 3rd Party in 2016 and beyond
  17. Re:You are a moron! by Runaway1956 · · Score: 1

    Let me know how that works out for you. So far, history doesn't have many examples of it working. Perhaps there are some good examples in pre-history, or maybe some of the lost cultures, but I wouldn't count on it. Few men really want to be free - they can't handle the responsibility, for starters. Men and women demand good leaders, they are lost without leadership. And - of course - evil bastards covet those leadership positions. Even if you DO find a bunch of good people to lead, that will only last for a couple generations, at best. History is filled with accounts of benevolent monarchs/dictators/emperors/whatever. The ruler finally gets old and dies, his worthless son takes over, and everything goes to hell.

    And, that is exactly what our own founding fathers were trying to avoid, here in the US.

    --
    "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  18. Re:You are a moron! by bondsbw · · Score: 1

    Since we must have leaders [citation needed], I prefer that we spread their power around so nobody, nor any associated group of leaders, can have full power.

    This is why I would like the US to engage in regular state-led Article V conventions. It isn't guaranteed to change much, I'm not even sure I want much to change, but does remove ultimate sovereignty away from Washington if it ever truly gets out of hand.

    --
    All my liberal friends think I'm a conservative, all my conservative friends think I'm a liberal.
  19. I opted out, still being tracked. by rabbin · · Score: 1

    I opted out of all of their advertising programs (including "Relevant Mobile Advertising", which is supposedly the "supercookie") a day or so ago, restarted my 4G hotspot, and the above http://www.amibeingtracked.com... link says I'm still being tracked.

    1. Re: I opted out, still being tracked. by Thundersnatch · · Score: 1

      Same here; opted out but cookie still present. I assume it takes some time for the settings to propagate from $central_database to $thousands_of_edge_devices.

      I will check back every few hours to see how long it takes.

    2. Re: I opted out, still being tracked. by Thundersnatch · · Score: 1

      4 days after opting out and amibeingtracked,com finally reports no super cookie present!

    3. Re: I opted out, still being tracked. by Thundersnatch · · Score: 1

      4 days after opting out and amibeingtracked,com finally reports no super cookie present. So it takes a while...

    4. Re: I opted out, still being tracked. by rabbin · · Score: 1

      Good to hear. Still being tracked on my end. If it doesn't change soon, I might give them a call.

    5. Re: I opted out, still being tracked. by rabbin · · Score: 1

      Finally no longer being tracked. So it can take a week or two.

  20. Re:You are a moron! by Rakarra · · Score: 1

    The fools certainly come out on April 1st!
    Oh, I wish it only happened one day a year.