Summary Android’s sandboxing typically keeps apps from sharing sensitive identifiers, but a loophole allows apps to subversively bypass privacy measures. Meta and Yandex tracker embeds have been discovered exploiting localhost connections to send cookie data to apps without permission. Google ...
